GIAC Exam GCCC Topic 3 Question 69 Discussion

Actual exam question for GIAC's GCCC exam

Question #: 69
Topic #: 3

[All GCCC Questions]

An organization has implemented a control for penetration testing and red team exercises conducted on their network. They have compiled metrics showing the success of the penetration testing (Penetration Tests), as well as the number of actual adversary attacks they have sustained (External Attacks). Assess the metrics below and determine the appropriate interpretation with respect to this control.

AThe blue team is adequately protecting the network

BThere are too many internal penetration tests being conducted

CThe methods the red team is using are not effectively testing the network

DThe red team is improving their capability to measure network security

Show Suggested Answer

Suggested Answer: C

by Deeanna at Mar 23, 2025, 12:40 PM

Limited Time Offer

25%

Off

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Florinda

3 days ago

Hah, option A is a classic 'blue team' response. They just want to pat themselves on the back and say 'we're doing a great job!' Wake up, guys, the metrics tell a different story.

upvoted 0 times

...

Lilli

6 days ago

Hold on, isn't option B a bit concerning? Too many internal penetration tests could be a waste of resources. Maybe the organization needs to re-evaluate their testing strategy.

upvoted 0 times

...

Bulah

6 days ago

I disagree with Emelda, the blue team seems to be adequately protecting the network.

upvoted 0 times

...

Emelda

7 days ago

I believe there are too many internal penetration tests being conducted.

upvoted 0 times

...

Reena

8 days ago

Option D definitely looks like the right choice here. The red team is clearly getting better at measuring the network's security posture. I bet they're using some fancy new tools or techniques.

upvoted 0 times

...

Joseph

10 days ago

I agree with Ruthann, the metrics show that the red team is doing a good job.

upvoted 0 times

...

Ruthann

13 days ago

I think the red team is improving their capability to measure network security.

upvoted 0 times

...