MENU
Below is a screenshot from a deployed next-generation firewall. These configuration settings would be a defensive measure for which CIS Control?
Suggested Answer: D
Get Premium GCCC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
39 comments · newest first
LA
Laticia
10 months ago
Surprised this isn't more obvious, it's clearly about secure configurations!
MA
Mattie
11 months ago
Wait, are we sure it's not A? That seems relevant too.
LA
Lajuana
11 months ago
I agree with Aliza, D is the right choice!
AL
Aliza
11 months ago
I think it's B, controlling network ports is key here.
AL
Aliza
11 months ago
Definitely looks like D to me, secure config for network devices!
XU
Xuan
11 months ago
I’m a bit confused; I thought email and web protections were more about user devices than firewalls.
LE
Leontine
12 months ago
I feel like this could also tie into the need to know principle, but the firewall aspect makes me lean towards secure configuration.
LA
Lashawna
12 months ago
I remember practicing a question about firewall settings, and it was definitely about controlling network ports and protocols.
AL
Allene
12 months ago
I think this might relate to secure configuration for network devices, but I'm not entirely sure.
LA
Latricia
12 months ago
I'm a bit unsure about this one. The firewall settings seem to be about restricting access, but I'm not sure which CIS Control that would fall under. I'll have to think it through step-by-step to determine the best answer.
SY
Sylvia
12 months ago
Hmm, the question is asking about a specific CIS Control, but I'm not too familiar with those. I'll need to review the CIS Controls list carefully to figure out which one is the best match for this firewall configuration.
AL
Alex
1 year ago
This looks like a firewall configuration, so I'm thinking it's related to network security controls. I'll review the CIS Controls and see which one seems to best match the defensive measures shown in the screenshot.
MA
Mari
1 year ago
Ah, this is a classic network security question. The firewall settings are clearly designed to control and limit network access, so I'm going to go with Option B, "Limitation and Control of Network Ports, Protocols and Services."
AL
Alba
1 year ago
Okay, I've got this. The degree of dispersion of responsibility is called the level of decentralization, I believe.
JO
Jolanda
1 year ago
Based on the question, I believe the minimum configuration would be one template with two snapshots. That should provide the persistent disks for power users and the instant clone desktops for task workers.
AL
Alecia
1 year ago
After seeing that screenshot, I feel like I need to upgrade my home router. Can it even be considered 'next-gen' if it doesn't have a 'Deny All' button?
SO
Sol
1 year ago
D) Secure Configuration for Network Devices, such as Firewalls, Routers and Switches.
MA
Marsha
1 year ago
C) Email and Web Browser Protections
NE
Nenita
1 year ago
B) Limitation and Control of Network Ports, Protocols and Services
AR
Armanda
1 year ago
A) Controlled Access Based on the Need to Know
MA
Marya
1 year ago
Hmm, this is a tricky one. I wonder if the firewall is also limiting access based on need-to-know...Tough call, but I'll go with D.
TW
Twanna
1 year ago
User 3: I'm not sure, but I'll go with D, secure configuration for network devices.
JA
Jacob
1 year ago
User 2: I agree with Jacob, B sounds like the right choice.
HO
Hortencia
1 year ago
User 1: I think it's B, limiting and controlling network ports, protocols, and services.
FR
Francine
1 year ago
Email and web browser protections? Nah, this is definitely about securing network devices. D is the way to go.
LE
Leonida
1 year ago
Definitely, email and web browser protections wouldn't involve those settings.
GI
Giovanna
1 year ago
Yeah, those configuration settings look more like they are for network devices.
CO
Coleen
1 year ago
I agree, D is the best option for securing network devices.
ST
Stephanie
1 year ago
The screenshot shows settings for a next-gen firewall, so I think D is the correct answer.
JU
Justine
1 year ago
I think D is the best option too, considering the configuration settings shown in the screenshot.
JU
Justine
1 year ago
I agree, D seems like the most appropriate choice for this scenario.
FL
Florinda
1 year ago
I'm not sure, but I think it could also be D) Secure Configuration for Network Devices. The settings seem to focus on securing network devices like firewalls.
MA
Malcom
1 year ago
This looks like a configuration for controlling network ports and protocols, so I'd go with option B.
WI
William
1 year ago
I see where you're coming from, but I still think option C could be a possibility with email and web browser protections.
CO
Corazon
1 year ago
I'm leaning towards option B as well, it makes sense given the settings in the screenshot.
NO
Noble
1 year ago
I think option D could also be a good fit since it involves secure configuration for network devices.
BR
Brittney
1 year ago
I agree, option B seems like the best choice for this configuration.
HY
Hyun
2 years ago
I agree with Kerry. Those configuration settings definitely align with that CIS Control.
KE
Kerry
2 years ago
I think the answer is B) Limitation and Control of Network Ports, Protocols and Services.