GIAC Exam GCCC Topic 3 Question 69 Discussion

Actual exam question for GIAC's GCCC exam

Question #: 69
Topic #: 3

[All GCCC Questions]

An organization has implemented a control for penetration testing and red team exercises conducted on their network. They have compiled metrics showing the success of the penetration testing (Penetration Tests), as well as the number of actual adversary attacks they have sustained (External Attacks). Assess the metrics below and determine the appropriate interpretation with respect to this control.

AThe blue team is adequately protecting the network

BThere are too many internal penetration tests being conducted

CThe methods the red team is using are not effectively testing the network

DThe red team is improving their capability to measure network security

Show Suggested Answer

Suggested Answer: C

by Deeanna at Mar 23, 2025, 12:40 PM

Limited Time Offer

25%

Off

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Haydee

6 days ago

Option C seems like the lazy answer. The red team is clearly upping their game, but the network's defenses need some work. Time to get the big brains in the room and figure this out.

upvoted 0 times

...

Florinda

15 days ago

Hah, option A is a classic 'blue team' response. They just want to pat themselves on the back and say 'we're doing a great job!' Wake up, guys, the metrics tell a different story.

upvoted 0 times

...

Lilli

18 days ago

Hold on, isn't option B a bit concerning? Too many internal penetration tests could be a waste of resources. Maybe the organization needs to re-evaluate their testing strategy.

upvoted 0 times

...

Bulah

18 days ago

I disagree with Emelda, the blue team seems to be adequately protecting the network.

upvoted 0 times

...

Emelda

19 days ago

I believe there are too many internal penetration tests being conducted.

upvoted 0 times

...

Reena

20 days ago

Option D definitely looks like the right choice here. The red team is clearly getting better at measuring the network's security posture. I bet they're using some fancy new tools or techniques.

upvoted 0 times