GIAC Exam GCCC Topic 5 Question 53 Discussion

Actual exam question for GIAC's GCCC exam

Question #: 53
Topic #: 5

An organization is implementing an application software security control their custom-written code that provides web---based database access to sales partners. Which action will help mitigate the risk of the application being compromised?

AProviding the source code for their web application to existing sales partners

BIdentifying high-risk assets that are on the same network as the web application server

CCreating signatures for their IDS to detect attacks specific to their web application

DLogging the connection requests to the web application server from outside hosts

Show Suggested Answer

Suggested Answer: C

by Micah at Jul 17, 2024, 11:04 PM

Limited Time Offer

25%

Off

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Matthew

5 months ago

I'd go with option C. Gotta love those custom IDS signatures - they're like the cybersecurity version of a secret handshake.

upvoted 0 times

Marjory

4 months ago

Logging connection requests is also important to monitor any suspicious activity from outside hosts.

upvoted 0 times

...

Loren

4 months ago

It's important to have a strong defense in place, especially when dealing with web-based database access.

upvoted 0 times

...

Maile

4 months ago

I agree, having signatures for their IDS tailored to their web application can provide better protection.

upvoted 0 times

...

Albina

5 months ago

Option C sounds like a good choice. Custom IDS signatures can definitely help detect specific attacks.

upvoted 0 times

...

France

6 months ago

I personally think option D is the way to go.

upvoted 0 times

...

Curtis

6 months ago

Sharing the source code with sales partners? Yeah, that's a great idea if they want to be the next target of a data breach. Hard pass on option A.

upvoted 0 times

...

Brandon

6 months ago

Option B is the right choice. Securing the high-risk assets on the same network is crucial to prevent the whole system from being compromised.

upvoted 0 times

Shanda

5 months ago

Logging the connection requests is also important to track any suspicious activity from outside hosts.

upvoted 0 times

...

Ashton

5 months ago

Agreed, securing those assets will help prevent any potential compromise of the system.

upvoted 0 times

...

Malcom

5 months ago

Option B is definitely the way to go. We need to protect those high-risk assets.

upvoted 0 times

...

Paris

6 months ago

I agree with Hailey, option C seems like the most logical choice.

upvoted 0 times

...

Daryl

6 months ago

I don't know, man. Logging connection requests from outside hosts seems like the easiest and most straightforward solution to me. Why overcomplicate things?

upvoted 0 times

...