Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GCCC Exam - Topic 6 Question 40 Discussion

Posted by Bette on Jan 26, 2024 at 10:55 PM

An organization has implemented a policy to continually detect and remove malware from its network. Which of the following is a detective control needed for this?

Suggested Answer: C

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
43 comments · newest first
CO
Corinne 11 months ago
B seems off, it’s more about prevention than detection.
RE
Renea 11 months ago
Totally agree with D, it's crucial for monitoring!
LA
Lakeesha 11 months ago
Wait, does C really help with malware detection?
KA
Kallie 11 months ago
I think A is more relevant for detecting issues.
LO
Lorenza 11 months ago
D is definitely a key detective control!
DO
Dorethea 11 months ago
I recall a practice question where we discussed how host-based firewalls are more preventive. So, I’m leaning towards the anti-virus option for this one.
WI
Wilda 12 months ago
I feel like the network intrusion detection devices are more about detecting threats rather than just sending alerts about signature updates.
AL
Alaine 12 months ago
I'm not entirely sure, but I remember something about intrusion detection systems being more about monitoring than prevention. Could that apply here?
ST
Stefanie 1 year ago
I think a host-based anti-virus sending alerts to a central security console makes sense as a detective control. It’s like what we practiced in class.
NI
Nikita 1 year ago
Okay, I've got this. The key is that we need a detective control, so it has to be something that actively monitors and alerts on malware activity. I think option D is the best choice here.
TE
Telma 1 year ago
Hmm, I'm a bit unsure about this one. I need to think through the different options and how they relate to detecting malware on the network.
ME
Merlyn 1 year ago
This seems like a straightforward question about security controls. I'll focus on identifying the detective control that would be used to detect malware.
JI
Jina 1 year ago
I'm confident that option D is the correct answer. Host-based antivirus software is a common detective control used to identify and alert on the presence of malware on individual systems.
CA
Carlee 1 year ago
Hmm, I'm a little unsure about this one. The question mentions a continuous epidural, so I'm wondering if that changes the coding. I'll have to double-check the guidelines on that.
MI
Miesha 1 year ago
I feel pretty confident about this one. Based on the information provided, I believe the correct answer is A - the item's primary UOM, minimum order quantity, maximum order quantity, and fixed lead time were all updated to match the new template values.
SV
Svetlana 1 year ago
Ah, I remember learning about the export template in class. I think it supports all of those formats, but I'll make sure to read the question thoroughly before answering.
SH
Shasta 1 year ago
Option D is the clear winner here. Centralized monitoring and alerting from host-based antivirus is the textbook detective control for this scenario.
CH
Cherilyn 1 year ago
I'm gonna go with E) The organization should just unplug the whole network. No malware if there's no network, right?
KR
Kristal 1 year ago
D, definitely D. Host-based anti-virus sending alerts to a central console is the way to go. Gotta keep that malware under control!
MA
Matilda 1 year ago
↳ replying to Kristal
True, having multiple detective controls in place can strengthen the organization's ability to detect and remove malware from the network.
LA
Lai 1 year ago
↳ replying to Kristal
Host-based firewall sending alerts when packets are sent to a closed port can also help in detecting malware activity.
SY
Sylvie 1 year ago
↳ replying to Kristal
I think Network Intrusion Detection devices sending alerts when signatures are updated could also be helpful in detecting malware.
SA
Santos 1 year ago
↳ replying to Kristal
I agree, having alerts sent to a central console makes it easier to monitor and respond to malware threats.
CH
Christiane 1 year ago
Haha, I bet the correct answer is C. Network Intrusion Detection devices sends alerts when signatures are updated. That's the most IT-sounding answer, so it's gotta be right!
CA
Cassie 1 year ago
↳ replying to Christiane
User 3: Actually, I think the answer is C) Network Intrusion Detection devices sends alerts when signatures are updated
CE
Celia 1 year ago
↳ replying to Christiane
User 2: I disagree, I believe the correct answer is D) Host-based anti-virus sends alerts to a central security console
LI
Lindsey 1 year ago
↳ replying to Christiane
User 1: I think the answer is A) Host-based firewall sends alerts when packets are sent to a closed port
LA
Lanie 1 year ago
But wouldn't detecting malware require monitoring network traffic, which is why C) makes more sense?
LA
Lavelle 1 year ago
I'm going with B. Network Intrusion Prevention sends alerts when RST packets are received. That seems like a good way to detect and respond to potential malware activities.
LA
Latia 1 year ago
↳ replying to Lavelle
I agree, having alerts sent to a central console can help with centralized monitoring and response.
MI
Micaela 1 year ago
↳ replying to Lavelle
I think D is a good option too. Host-based anti-virus sends alerts to a central security console.
SI
Simona 1 year ago
↳ replying to Lavelle
I think D could also be a good choice, with host-based anti-virus sending alerts to a central security console.
TR
Trinidad 1 year ago
↳ replying to Lavelle
I agree, B sounds like a good option for detecting malware.
KE
Keshia 1 year ago
I disagree, I believe the answer is D) Host-based anti-virus sends alerts to a central security console.
LA
Lanie 1 year ago
I think the answer is C) Network Intrusion Detection devices sends alerts when signatures are updated.
AL
Albert 1 year ago
I'm not sure, but I think C) Network Intrusion Detection devices sends alerts when signatures are updated could also be a good detective control.
TH
Thurman 2 years ago
I agree with Tanja. Having alerts sent to a central security console would help in detecting and removing malware efficiently.
EM
Emile 2 years ago
I think the correct answer is D. Host-based anti-virus sends alerts to a central security console. This is a detective control that continuously monitors for and detects malware on the network.
MA
Maddie 1 year ago
↳ replying to Emile
True, that could also help in detecting suspicious activity on the network.
BA
Barbra 1 year ago
↳ replying to Emile
But what about option A? Host-based firewall sending alerts when packets are sent to a closed port could also be a detective control.
QU
Quentin 1 year ago
↳ replying to Emile
That makes sense, it would help in detecting malware on the network.
DE
Detra 1 year ago
↳ replying to Emile
I think the correct answer is D. Host-based anti-virus sends alerts to a central security console.
TA
Tanja 2 years ago
I think the answer is D) Host-based anti-virus sends alerts to a central security console.
0/2000 characters

Save Cancel