Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

GIAC GCCC Exam - Topic 6 Question 40 Discussion

An organization has implemented a policy to continually detect and remove malware from its network. Which of the following is a detective control needed for this?
C) Network Intrusion Detection devices sends alerts when signatures are updated
A) Host-based firewall sends alerts when packets are sent to a closed port
B) Network Intrusion Prevention sends alerts when RST packets are received
D) Host-based anti-virus sends alerts to a central security console

GIAC GCCC Exam - Topic 6 Question 40 Discussion

Actual exam question for GIAC's GCCC exam
Question #: 40
Topic #: 6
[All GCCC Questions]

An organization has implemented a policy to continually detect and remove malware from its network. Which of the following is a detective control needed for this?

Show Suggested Answer Hide Answer
Suggested Answer: C

by Bette at Jan 26, 2024, 10:55 PM

Limited Time Offer

25%

Off

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Corinne
9 months ago
B seems off, it’s more about prevention than detection.
upvoted 0 times
...
Renea
9 months ago
Totally agree with D, it's crucial for monitoring!
upvoted 0 times
...
Lakeesha
9 months ago
Wait, does C really help with malware detection?
upvoted 0 times
...
Kallie
9 months ago
I think A is more relevant for detecting issues.
upvoted 0 times
...
Lorenza
9 months ago
D is definitely a key detective control!
upvoted 0 times
...
Dorethea
9 months ago
I recall a practice question where we discussed how host-based firewalls are more preventive. So, I’m leaning towards the anti-virus option for this one.
upvoted 0 times
...
Wilda
10 months ago
I feel like the network intrusion detection devices are more about detecting threats rather than just sending alerts about signature updates.
upvoted 0 times
...
Alaine
10 months ago
I'm not entirely sure, but I remember something about intrusion detection systems being more about monitoring than prevention. Could that apply here?
upvoted 0 times
...
Stefanie
10 months ago
I think a host-based anti-virus sending alerts to a central security console makes sense as a detective control. It’s like what we practiced in class.
upvoted 0 times
...
Nikita
10 months ago
Okay, I've got this. The key is that we need a detective control, so it has to be something that actively monitors and alerts on malware activity. I think option D is the best choice here.
upvoted 0 times
...
Telma
10 months ago
Hmm, I'm a bit unsure about this one. I need to think through the different options and how they relate to detecting malware on the network.
upvoted 0 times
...
Merlyn
10 months ago
This seems like a straightforward question about security controls. I'll focus on identifying the detective control that would be used to detect malware.
upvoted 0 times
...
Jina
10 months ago
I'm confident that option D is the correct answer. Host-based antivirus software is a common detective control used to identify and alert on the presence of malware on individual systems.
upvoted 0 times
...
Carlee
10 months ago
Hmm, I'm a little unsure about this one. The question mentions a continuous epidural, so I'm wondering if that changes the coding. I'll have to double-check the guidelines on that.
upvoted 0 times
...
Miesha
10 months ago
I feel pretty confident about this one. Based on the information provided, I believe the correct answer is A - the item's primary UOM, minimum order quantity, maximum order quantity, and fixed lead time were all updated to match the new template values.
upvoted 0 times
...
Svetlana
10 months ago
Ah, I remember learning about the export template in class. I think it supports all of those formats, but I'll make sure to read the question thoroughly before answering.
upvoted 0 times
...
Shasta
1 year ago
Option D is the clear winner here. Centralized monitoring and alerting from host-based antivirus is the textbook detective control for this scenario.
upvoted 0 times
...
Cherilyn
1 year ago
I'm gonna go with E) The organization should just unplug the whole network. No malware if there's no network, right?
upvoted 0 times
...
Kristal
1 year ago
D, definitely D. Host-based anti-virus sending alerts to a central console is the way to go. Gotta keep that malware under control!
upvoted 0 times
Matilda
1 year ago
True, having multiple detective controls in place can strengthen the organization's ability to detect and remove malware from the network.
upvoted 0 times
...
Lai
1 year ago
Host-based firewall sending alerts when packets are sent to a closed port can also help in detecting malware activity.
upvoted 0 times
...
Sylvie
1 year ago
I think Network Intrusion Detection devices sending alerts when signatures are updated could also be helpful in detecting malware.
upvoted 0 times
...
Santos
1 year ago
I agree, having alerts sent to a central console makes it easier to monitor and respond to malware threats.
upvoted 0 times
...
...
Christiane
1 year ago
Haha, I bet the correct answer is C. Network Intrusion Detection devices sends alerts when signatures are updated. That's the most IT-sounding answer, so it's gotta be right!
upvoted 0 times
Cassie
1 year ago
User 3: Actually, I think the answer is C) Network Intrusion Detection devices sends alerts when signatures are updated
upvoted 0 times
...
Celia
1 year ago
User 2: I disagree, I believe the correct answer is D) Host-based anti-virus sends alerts to a central security console
upvoted 0 times
...
Lindsey
1 year ago
User 1: I think the answer is A) Host-based firewall sends alerts when packets are sent to a closed port
upvoted 0 times
...
...
Lanie
1 year ago
But wouldn't detecting malware require monitoring network traffic, which is why C) makes more sense?
upvoted 0 times
...
Lavelle
1 year ago
I'm going with B. Network Intrusion Prevention sends alerts when RST packets are received. That seems like a good way to detect and respond to potential malware activities.
upvoted 0 times
Latia
1 year ago
I agree, having alerts sent to a central console can help with centralized monitoring and response.
upvoted 0 times
...
Micaela
1 year ago
I think D is a good option too. Host-based anti-virus sends alerts to a central security console.
upvoted 0 times
...
Simona
1 year ago
I think D could also be a good choice, with host-based anti-virus sending alerts to a central security console.
upvoted 0 times
...
Trinidad
1 year ago
I agree, B sounds like a good option for detecting malware.
upvoted 0 times
...
...
Keshia
1 year ago
I disagree, I believe the answer is D) Host-based anti-virus sends alerts to a central security console.
upvoted 0 times
...
Lanie
1 year ago
I think the answer is C) Network Intrusion Detection devices sends alerts when signatures are updated.
upvoted 0 times
...
Albert
1 year ago
I'm not sure, but I think C) Network Intrusion Detection devices sends alerts when signatures are updated could also be a good detective control.
upvoted 0 times
...
Thurman
1 year ago
I agree with Tanja. Having alerts sent to a central security console would help in detecting and removing malware efficiently.
upvoted 0 times
...
Emile
1 year ago
I think the correct answer is D. Host-based anti-virus sends alerts to a central security console. This is a detective control that continuously monitors for and detects malware on the network.
upvoted 0 times
Maddie
1 year ago
True, that could also help in detecting suspicious activity on the network.
upvoted 0 times
...
Barbra
1 year ago
But what about option A? Host-based firewall sending alerts when packets are sent to a closed port could also be a detective control.
upvoted 0 times
...
Quentin
1 year ago
That makes sense, it would help in detecting malware on the network.
upvoted 0 times
...
Detra
1 year ago
I think the correct answer is D. Host-based anti-virus sends alerts to a central security console.
upvoted 0 times
...
...
Tanja
1 year ago
I think the answer is D) Host-based anti-virus sends alerts to a central security console.
upvoted 0 times
...

Save Cancel