Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

GIAC GCCC Exam - Topic 8 Question 32 Discussion

Acme Corporation is doing a core evaluation of its centralized logging capabilities. Which of the following scenarios indicates a failure in more than one CIS Control?
D) The loghost is receiving out-of-sync logs from undocumented servers
A) The loghost is missing logs from 3 servers in the inventory
B) The loghost is receiving logs from hosts with different timezone values
C) The loghost time is out-of-sync with an external host

GIAC GCCC Exam - Topic 8 Question 32 Discussion

Actual exam question for GIAC's GCCC exam
Question #: 32
Topic #: 8
[All GCCC Questions]

Acme Corporation is doing a core evaluation of its centralized logging capabilities. Which of the following scenarios indicates a failure in more than one CIS Control?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Dean at Jul 29, 2023, 10:19 AM

Limited Time Offer

25%

Off

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Jess
9 months ago
Wait, are we sure A is a failure in multiple controls? Seems like just one to me.
upvoted 0 times
...
Scarlet
9 months ago
B seems minor, but it could cause confusion later on.
upvoted 0 times
...
Glenn
9 months ago
C is a classic mistake, time sync is crucial for logs.
upvoted 0 times
...
Asha
9 months ago
I think D is worse, undocumented servers can lead to major issues.
upvoted 0 times
...
Jose
9 months ago
A is definitely a problem, missing logs is a big deal.
upvoted 0 times
...
Micaela
10 months ago
Option B seems less critical to me, but I guess different timezones could still cause issues with log analysis. Not sure if it counts as multiple failures though.
upvoted 0 times
...
Samira
10 months ago
I practiced a similar question where missing logs pointed to control failures. So, I'm leaning towards option A being a strong candidate.
upvoted 0 times
...
Filiberto
10 months ago
I'm not entirely sure, but I remember something about time synchronization being important for logs. Maybe option C is relevant here?
upvoted 0 times
...
Lorriane
10 months ago
I think option D might indicate a failure in multiple CIS Controls, especially if those servers are undocumented.
upvoted 0 times
...
Matilda
10 months ago
I've got a good feeling about this one. I'm pretty sure it's the IP address change that requires the neighbor relationship to be re-established. The other options don't seem as critical for the neighbor connection.
upvoted 0 times
...
Maddie
10 months ago
Okay, let me see here. I remember that the WEM Agent can be installed on the Citrix Workspace Environment Management Infrastructure Services server, so I'll go with option B.
upvoted 0 times
...
Filiberto
10 months ago
I remember studying the steps for image upgrades, and I think using a different kickstart image might be the right move here.
upvoted 0 times
...
Emily
10 months ago
Okay, RAID-10 makes sense to me. It's got the redundancy of RAID-1 with the striping of RAID-0. I'm confident that's the right answer.
upvoted 0 times
...

Save Cancel