New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GCCC Exam - Topic 8 Question 32 Discussion

Actual exam question for GIAC's GCCC exam
Question #: 32
Topic #: 8
[All GCCC Questions]

Acme Corporation is doing a core evaluation of its centralized logging capabilities. Which of the following scenarios indicates a failure in more than one CIS Control?

Show Suggested Answer Hide Answer
Suggested Answer: D

Contribute your Thoughts:

0/2000 characters
Jess
3 months ago
Wait, are we sure A is a failure in multiple controls? Seems like just one to me.
upvoted 0 times
...
Scarlet
3 months ago
B seems minor, but it could cause confusion later on.
upvoted 0 times
...
Glenn
4 months ago
C is a classic mistake, time sync is crucial for logs.
upvoted 0 times
...
Asha
4 months ago
I think D is worse, undocumented servers can lead to major issues.
upvoted 0 times
...
Jose
4 months ago
A is definitely a problem, missing logs is a big deal.
upvoted 0 times
...
Micaela
4 months ago
Option B seems less critical to me, but I guess different timezones could still cause issues with log analysis. Not sure if it counts as multiple failures though.
upvoted 0 times
...
Samira
4 months ago
I practiced a similar question where missing logs pointed to control failures. So, I'm leaning towards option A being a strong candidate.
upvoted 0 times
...
Filiberto
5 months ago
I'm not entirely sure, but I remember something about time synchronization being important for logs. Maybe option C is relevant here?
upvoted 0 times
...
Lorriane
5 months ago
I think option D might indicate a failure in multiple CIS Controls, especially if those servers are undocumented.
upvoted 0 times
...
Matilda
5 months ago
I've got a good feeling about this one. I'm pretty sure it's the IP address change that requires the neighbor relationship to be re-established. The other options don't seem as critical for the neighbor connection.
upvoted 0 times
...
Maddie
5 months ago
Okay, let me see here. I remember that the WEM Agent can be installed on the Citrix Workspace Environment Management Infrastructure Services server, so I'll go with option B.
upvoted 0 times
...
Filiberto
5 months ago
I remember studying the steps for image upgrades, and I think using a different kickstart image might be the right move here.
upvoted 0 times
...
Emily
5 months ago
Okay, RAID-10 makes sense to me. It's got the redundancy of RAID-1 with the striping of RAID-0. I'm confident that's the right answer.
upvoted 0 times
...

Save Cancel