GIAC Critical Controls Certification (GCCC): GCCC

To effectively implement the Data Protection CIS Control, which task needs to be implemented first?

A. The organization's proprietary data needs to be encrypted

B. Employees need to be notified that proprietary data should be protected

C. The organization's proprietary data needs to be identified

D. Appropriate file content matching needs to be configured

What is a zero-day attack?

A. An attack that has a known attack signature but no available patch

B. An attack that utilizes a vulnerability unknown to the software developer

C. An attack that deploys at the end of a countdown sequence

D. An attack that is launched the day the patch is released

DHCP logging output in the screenshot would be used for which of the following?

A. Enforcing port-based network access control to prevent unauthorized devices on the network.

B. Identifying new connections to maintain an up-to-date inventory of devices on the network.

C. Detecting malicious activity by compromised or unauthorized devices on the network.

D. Providing ping sweep results to identify live network hosts for vulnerability scanning.