GIAC Exam GCCC Topic 6 Question 40 Discussion

Actual exam question for GIAC's GCCC exam

Question #: 40
Topic #: 6

[All GCCC Questions]

An organization has implemented a policy to continually detect and remove malware from its network. Which of the following is a detective control needed for this?

AHost-based firewall sends alerts when packets are sent to a closed port

BNetwork Intrusion Prevention sends alerts when RST packets are received

CNetwork Intrusion Detection devices sends alerts when signatures are updated

DHost-based anti-virus sends alerts to a central security console

Show Suggested Answer

Suggested Answer: C

by Bette at Jan 26, 2024, 10:55 PM

Limited Time Offer

25%

Off

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lanie

3 days ago

But wouldn't detecting malware require monitoring network traffic, which is why C) makes more sense?

upvoted 0 times

...

Lavelle

3 days ago

I'm going with B. Network Intrusion Prevention sends alerts when RST packets are received. That seems like a good way to detect and respond to potential malware activities.

upvoted 0 times

...

Keshia

4 days ago

I disagree, I believe the answer is D) Host-based anti-virus sends alerts to a central security console.

upvoted 0 times

...

Lanie

6 days ago

I think the answer is C) Network Intrusion Detection devices sends alerts when signatures are updated.

upvoted 0 times

...

Albert

7 days ago

I'm not sure, but I think C) Network Intrusion Detection devices sends alerts when signatures are updated could also be a good detective control.

upvoted 0 times

...

Thurman

9 days ago

I agree with Tanja. Having alerts sent to a central security console would help in detecting and removing malware efficiently.

upvoted 0 times

...

Emile

9 days ago

I think the correct answer is D. Host-based anti-virus sends alerts to a central security console. This is a detective control that continuously monitors for and detects malware on the network.

upvoted 0 times

...

Tanja

12 days ago

I think the answer is D) Host-based anti-virus sends alerts to a central security console.

upvoted 0 times

...