Discuss GIAC GCCC Exam Topic 6 Question 3

Janice is auditing the perimeter of the network at Sugar Water InC. According to documentation, external SMTP traffic is only allowed to and from 10.10.10.25. Which of the following actions would demonstrate the rules are configured incorrectly?

AReceive spam from a known bad domain

BReceive mail at Sugar Water Inc. account using Outlook as a mail client

CSuccessfully deliver mail from another host inside the network directly to an external contact

DSuccessfully deliver mail from web client using another host inside the network to an external contact.

Suggested Answer: C

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Ryan 11 months ago

Wait, can they really receive spam? That's wild!

Dorian 11 months ago

B is just normal usage, not a config issue.

Geraldo 12 months ago

D seems off, but I'm not sure if it breaks the rules.

Amos 12 months ago

I think C shows the rules are wrong too.

Barrie 12 months ago

A is definitely a sign of misconfiguration.

Hillary 1 year ago

I recall that if the rules are set up right, we shouldn't be able to send mail from inside to outside without going through the designated server. So, option C definitely seems wrong.

Earleen 1 year ago

I practiced a similar question where the focus was on unauthorized access. I feel like option A could be a sign of issues too, but I'm not confident about that.

Lyndia 1 year ago

I'm not entirely sure, but I remember something about how SMTP should only allow traffic from specific IPs. Maybe option D could also indicate a problem?

Francis 1 year ago

I think option C might show a misconfiguration since it mentions delivering mail directly to an external contact, which shouldn't happen if the rules are set correctly.

Bulah 1 year ago

I'm pretty sure Cisco was the first to provide commercial multiprotocol routers, so I'll go with option C.

Candida 1 year ago

Hmm, I'm a bit unsure about this one. I know a quota restricts imports, but I can't quite remember if that means the price goes up or down. I'll have to think this through carefully.

Marg 1 year ago

Okay, I've got this. The key is to create an authorization rule denying guest access. That will shut down the guest accounts and prevent any further unauthorized access.

GIAC GCCC Exam - Topic 6 Question 3 Discussion