Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

GIAC GCCC Exam - Topic 9 Question 72 Discussion

Which of the following statements is appropriate in an incident response report?
B) The registry entry was modified on September 29th at 22:37
A) There had been a storm on September 27th that may have caused a power surge
C) The attacker may have been able to access the systems due to missing KB2965111
D) The backup process may have failed at 2345 due to lack of available bandwidth

GIAC GCCC Exam - Topic 9 Question 72 Discussion

Actual exam question for GIAC's GCCC exam
Question #: 72
Topic #: 9
[All GCCC Questions]

Which of the following statements is appropriate in an incident response report?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Denise at Jun 16, 2025, 05:29 PM

Limited Time Offer

25%

Off

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Dorcas
8 months ago
C sounds a bit speculative, we need more evidence.
upvoted 0 times
...
Rosendo
8 months ago
B is the only one with a specific timestamp, makes it reliable.
upvoted 0 times
...
Mozelle
8 months ago
A storm could definitely cause issues, but it's not a solid fact.
upvoted 0 times
...
Jospeh
8 months ago
D seems plausible, but lack of bandwidth? Really?
upvoted 0 times
...
Florencia
8 months ago
Surprised that storm info is even mentioned, feels irrelevant.
upvoted 0 times
...
Valentin
9 months ago
Option C seems a bit uncertain with "may have been able to access," which doesn't sound right for a report. I guess I should stick with option B too.
upvoted 0 times
...
Karan
9 months ago
I think I saw a practice question that emphasized avoiding "may have" statements. So, I'm leaning towards option B again.
upvoted 0 times
...
Matt
9 months ago
I'm not entirely sure, but I feel like mentioning specific times and actions like in option B is crucial for clarity in reports.
upvoted 0 times
...
Whitley
9 months ago
I remember we discussed how incident reports should focus on factual information rather than speculation. I think option B is the most appropriate.
upvoted 0 times
...
Fernanda
9 months ago
Hmm, I'm not too sure about this one. I'll need to review my notes on incident response reporting to make sure I'm choosing the right kind of information to include. Gotta be careful with these tricky exam questions.
upvoted 0 times
...
Felice
10 months ago
I've got a good feeling about option C. Mentioning a missing security patch that may have allowed the attacker access seems like the kind of technical detail that would be important to include in an incident response.
upvoted 0 times
...
Audry
10 months ago
I'm a bit confused on this one. The other options seem to mention general events or possibilities, but I'm not sure if those would be the most appropriate for an incident report. I'll need to think this through carefully.
upvoted 0 times
...
Rebbecca
10 months ago
Okay, let's see here. I think option B is the most relevant - it provides a specific detail about a registry entry being modified, which could be important incident information.
upvoted 0 times
...
Joseph
10 months ago
Hmm, this looks like a tricky one. I'll need to carefully consider each option and think about what kind of information would be appropriate in an incident response report.
upvoted 0 times
...
Dominic
1 year ago
Haha, I bet the attacker was a meteorologist trying to cover their tracks with that storm excuse in Option A!
upvoted 0 times
...
Doretha
1 year ago
Definitely Option B. The other options are too vague or speculative. We need to stick to the facts in the report.
upvoted 0 times
Amie
1 year ago
Yes, we should avoid speculation and stick to the concrete details in the report.
upvoted 0 times
...
Paris
1 year ago
I agree, Option B is the most specific and factual statement.
upvoted 0 times
...
...
Lauran
1 year ago
I'm not sure, but I think statement A) about the storm causing a power surge could also be relevant in an incident response report.
upvoted 0 times
...
Jacquline
1 year ago
I agree with Michal. Option B gives the necessary technical details that an incident response report should include.
upvoted 0 times
...
Tess
1 year ago
I agree with Charlene, statement C makes sense because missing a critical security update could definitely lead to a security breach.
upvoted 0 times
...
Michal
1 year ago
Option B is the most appropriate. Providing specific details about the incident, like the registry entry modification, is crucial for an incident response report.
upvoted 0 times
Coral
1 year ago
I think option D is important too, highlighting a possible reason for the backup failure can help in addressing the issue.
upvoted 0 times
...
Jacob
1 year ago
Option C is also relevant, identifying a potential vulnerability like missing KB2965111 is crucial for prevention.
upvoted 0 times
...
Alyce
1 year ago
I agree, option B provides a specific detail that can help in understanding the incident better.
upvoted 0 times
...
Arminda
1 year ago
I think option A is also important, mentioning a possible cause like a power surge can provide context.
upvoted 0 times
...
...
Charlene
1 year ago
I think the correct statement is C) The attacker may have been able to access the systems due to missing KB2965111.
upvoted 0 times
...

Save Cancel