New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GCCC Exam - Topic 6 Question 75 Discussion

Actual exam question for GIAC's GCCC exam
Question #: 75
Topic #: 6
[All GCCC Questions]

Kenya is a system administrator for SANS. Per the recommendations of the CIS Controls she has a dedicated host (kenya- adminbox / 10.10.10.10) for any administrative tasks. She logs into the dedicated host with her domain admin credentials. Which of the following connections should not exist from kenya-adminbox?

Show Suggested Answer Hide Answer
Suggested Answer: B

Contribute your Thoughts:

0/2000 characters
Nida
2 months ago
Definitely no connections to public-facing services like that!
upvoted 0 times
...
Herminia
2 months ago
Wait, is 10.10.245.3389 even a valid IP?
upvoted 0 times
...
Gwen
2 months ago
I agree, that’s a security risk!
upvoted 0 times
...
Catina
3 months ago
I thought admin boxes could connect to anything as long as it's secure?
upvoted 0 times
...
Donette
3 months ago
Shouldn't be any connections to external mail servers from admin boxes.
upvoted 0 times
...
Joseph
3 months ago
I’m confused about the ports. I think option D could be problematic too, but I’m not sure if it’s the most dangerous one.
upvoted 0 times
...
Noemi
3 months ago
I practiced a similar question where we had to identify risky connections. I feel like option C might be the right answer since it involves a firewall.
upvoted 0 times
...
Kristal
4 months ago
I'm not entirely sure, but I remember something about avoiding unnecessary connections from admin boxes. Could it be option A with that weird IP?
upvoted 0 times
...
Evangelina
4 months ago
I think the connection that shouldn't exist is related to external services, like the mail server. Maybe option B?
upvoted 0 times
...
Chi
4 months ago
I've got a strategy for this. I'll consider the types of connections that should be limited or restricted from the admin box, and then identify the one that stands out.
upvoted 0 times
...
Yuonne
4 months ago
I'm a bit unsure about this one. I'll need to review the CIS Controls and think about the purpose of the admin box to make the right call.
upvoted 0 times
...
Ayesha
4 months ago
Okay, I see the options here. I'll need to carefully evaluate each one to determine which one doesn't align with the recommendations for the admin box.
upvoted 0 times
...
Karina
4 months ago
Hmm, let me think this through. The admin box is for administrative tasks, so I need to consider which connection would be inappropriate or risky.
upvoted 0 times
...
Joanna
5 months ago
This question seems straightforward, I just need to identify the connection that shouldn't exist from the admin box.
upvoted 0 times
...
Alona
5 months ago
I think option D) 10.10.10.33.443 should not exist, as it is a non-standard port for HTTPS
upvoted 0 times
...
Julianna
5 months ago
I agree with Desmond, because RDP connections should not be allowed from the admin host
upvoted 0 times
...
Aliza
5 months ago
Wait, is Kenya's admin box connected to the firewall through a secret tunnel? That's some Mission: Impossible level stuff right there!
upvoted 0 times
...
Delsie
5 months ago
D) 10.10.10.33.443 - HTTPS? Meh, could be okay, but I'd double-check that host and port just in case.
upvoted 0 times
Telma
1 month ago
B looks suspicious as well. Mail ports can be tricky.
upvoted 0 times
...
Mollie
2 months ago
What about A? That seems off too.
upvoted 0 times
...
Hillary
2 months ago
Agreed, D might be a red flag.
upvoted 0 times
...
Kris
2 months ago
I think D is risky. Better to verify.
upvoted 0 times
...
...
Lashon
6 months ago
C) Firewall_charon.jane.org.22 - SSH to the firewall? Sounds about right, that's probably needed for admin tasks.
upvoted 0 times
...
Omega
6 months ago
B) Mail.jane.org.25 - Hmm, that could be a legitimate mail server connection, not necessarily a bad thing.
upvoted 0 times
Salena
5 months ago
User 2: B) Mail.jane.org.25 - Yeah, it could be legit, but still worth investigating.
upvoted 0 times
...
Trinidad
5 months ago
User 1: A) 10.10.245.3389 - That looks suspicious, could be a remote desktop connection.
upvoted 0 times
...
...
Desmond
6 months ago
I think the connection that should not exist is A) 10.10.245.3389
upvoted 0 times
...
Edgar
7 months ago
A) 10.10.245.3389 - Definitely should not exist! That's a remote desktop connection, not secure for an admin box.
upvoted 0 times
Tracie
5 months ago
User3: C) Firewall_charon.jane.org.22 - That's an SSH connection, it should be allowed on an admin box.
upvoted 0 times
...
Vernell
5 months ago
User2: B) Mail.jane.org.25 - Agreed, that's not a secure connection for an admin box.
upvoted 0 times
...
Deangelo
6 months ago
User1: A) 10.10.245.3389 - Definitely should not exist! That's a remote desktop connection, not secure for an admin box.
upvoted 0 times
...
...

Save Cancel