GIAC GISF Exam - Topic 7 Question 73 Discussion

Actual exam question for GIAC's GISF exam

Question #: 73
Topic #: 7

[All GISF Questions]

You discover that someone has been logging onto your network after office hours. After investigating this you find the login belongs to someone who left the company 12 months ago. What would have been the best method to prevent this?

AA DMZ firewall.

BA policy with time of day restrictions.

CA policy with account expiration.

DAn IDS system.

Show Suggested Answer

Suggested Answer: C

by Billy at Jul 04, 2025, 04:37 AM

Limited Time Offer

25%

Off

Get Premium GISF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Glenn

2 months ago

A DMZ firewall wouldn't really stop this issue.

upvoted 0 times

...

Rodney

2 months ago

I think time of day restrictions could help too.

upvoted 0 times

...

Ailene

3 months ago

Wait, how did they even log in after a year?

upvoted 0 times

...

Allene

3 months ago

I agree, account expiration is key for security!

upvoted 0 times

...

Pok

3 months ago

Definitely a policy with account expiration!

upvoted 0 times

...

Danica

3 months ago

I keep getting mixed up between the different policies, but I think account expiration is crucial for preventing old accounts from being misused.

upvoted 0 times

...

Fausto

4 months ago

I practiced a similar question about unauthorized access, and I think an IDS system would just alert us after the fact, not prevent it.

upvoted 0 times

...

Fernanda

4 months ago

I'm not entirely sure, but I feel like time of day restrictions could help too. It seems like a good preventive measure.

upvoted 0 times

...

Aleshia

4 months ago

I remember discussing account expiration policies in class, so I think option C might be the best choice here.

upvoted 0 times

...

Carry

4 months ago

I'm a bit unsure about this one. The DMZ firewall or IDS system options don't seem directly relevant to the problem described. I think the account expiration policy or time of day restrictions would be the way to go here.

upvoted 0 times

...

Dick

4 months ago

Okay, let me think this through. Since the login belonged to a former employee, I'd say the best solution is a policy with account expiration. That way, once someone leaves the company, their access gets automatically revoked after a certain period of time.

upvoted 0 times

...

Bettina

5 months ago

Hmm, this is a tricky one. I'm not sure if a DMZ firewall or an IDS system would have prevented this specific issue. The time of day restrictions or account expiration policy seem like the most relevant options here.

upvoted 0 times

...

Tommy

5 months ago

This seems like a straightforward question about access control policies. I think the best approach would be to focus on the key details - someone who left the company 12 months ago was still able to log in. That suggests the need for a policy with account expiration.

upvoted 0 times

...