GIAC GCCC Exam - Topic 6 Question 75 Discussion

Actual exam question for GIAC's GCCC exam

Question #: 75
Topic #: 6

Kenya is a system administrator for SANS. Per the recommendations of the CIS Controls she has a dedicated host (kenya- adminbox / 10.10.10.10) for any administrative tasks. She logs into the dedicated host with her domain admin credentials. Which of the following connections should not exist from kenya-adminbox?

A10.10.245.3389

BMail.jane.org.25

CFirewall_charon.jane.org.22

D10.10.10.33.443

Show Suggested Answer

Suggested Answer: B

by Janey at Aug 01, 2025, 06:32 AM

Limited Time Offer

25%

Off

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Nida

8 months ago

Definitely no connections to public-facing services like that!

upvoted 0 times

...

Herminia

8 months ago

Wait, is 10.10.245.3389 even a valid IP?

upvoted 0 times

...

Gwen

8 months ago

I agree, that’s a security risk!

upvoted 0 times

...

Catina

9 months ago

I thought admin boxes could connect to anything as long as it's secure?

upvoted 0 times

...

Donette

9 months ago

Shouldn't be any connections to external mail servers from admin boxes.

upvoted 0 times

...

Joseph

9 months ago

I’m confused about the ports. I think option D could be problematic too, but I’m not sure if it’s the most dangerous one.

upvoted 0 times

...

Noemi

9 months ago

I practiced a similar question where we had to identify risky connections. I feel like option C might be the right answer since it involves a firewall.

upvoted 0 times

...

Kristal

10 months ago

I'm not entirely sure, but I remember something about avoiding unnecessary connections from admin boxes. Could it be option A with that weird IP?

upvoted 0 times

...

Evangelina

10 months ago

I think the connection that shouldn't exist is related to external services, like the mail server. Maybe option B?

upvoted 0 times

...

Chi

10 months ago

I've got a strategy for this. I'll consider the types of connections that should be limited or restricted from the admin box, and then identify the one that stands out.

upvoted 0 times

...

Yuonne

10 months ago

I'm a bit unsure about this one. I'll need to review the CIS Controls and think about the purpose of the admin box to make the right call.

upvoted 0 times

...

Ayesha

10 months ago

Okay, I see the options here. I'll need to carefully evaluate each one to determine which one doesn't align with the recommendations for the admin box.

upvoted 0 times

...

Karina

10 months ago

Hmm, let me think this through. The admin box is for administrative tasks, so I need to consider which connection would be inappropriate or risky.

upvoted 0 times

...

Joanna

11 months ago

This question seems straightforward, I just need to identify the connection that shouldn't exist from the admin box.

upvoted 0 times

...

Alona

11 months ago

I think option D) 10.10.10.33.443 should not exist, as it is a non-standard port for HTTPS

upvoted 0 times

...

Julianna

11 months ago

I agree with Desmond, because RDP connections should not be allowed from the admin host

upvoted 0 times

...

Aliza

11 months ago

Wait, is Kenya's admin box connected to the firewall through a secret tunnel? That's some Mission: Impossible level stuff right there!

upvoted 0 times

...

Delsie

11 months ago

D) 10.10.10.33.443 - HTTPS? Meh, could be okay, but I'd double-check that host and port just in case.

upvoted 0 times

Telma

7 months ago

B looks suspicious as well. Mail ports can be tricky.

upvoted 0 times

...

Mollie

8 months ago

What about A? That seems off too.

upvoted 0 times

...

Hillary

8 months ago

Agreed, D might be a red flag.

upvoted 0 times

...

Kris

8 months ago

I think D is risky. Better to verify.

upvoted 0 times

...

Lashon

1 year ago

C) Firewall_charon.jane.org.22 - SSH to the firewall? Sounds about right, that's probably needed for admin tasks.

upvoted 0 times

...

Omega

1 year ago

B) Mail.jane.org.25 - Hmm, that could be a legitimate mail server connection, not necessarily a bad thing.

upvoted 0 times

Salena

11 months ago

User 2: B) Mail.jane.org.25 - Yeah, it could be legit, but still worth investigating.

upvoted 0 times

...

Trinidad

11 months ago

User 1: A) 10.10.245.3389 - That looks suspicious, could be a remote desktop connection.

upvoted 0 times

...

Desmond

1 year ago

I think the connection that should not exist is A) 10.10.245.3389

upvoted 0 times

...

Edgar

1 year ago

A) 10.10.245.3389 - Definitely should not exist! That's a remote desktop connection, not secure for an admin box.

upvoted 0 times

Tracie

11 months ago

User3: C) Firewall_charon.jane.org.22 - That's an SSH connection, it should be allowed on an admin box.

upvoted 0 times

...

Vernell

11 months ago

User2: B) Mail.jane.org.25 - Agreed, that's not a secure connection for an admin box.

upvoted 0 times

...

Deangelo

1 year ago

User1: A) 10.10.245.3389 - Definitely should not exist! That's a remote desktop connection, not secure for an admin box.

upvoted 0 times

...