GIAC Exam GCCC Topic 7 Question 44 Discussion

Actual exam question for GIAC's GCCC exam

Question #: 44
Topic #: 7

Acme Corporation is doing a core evaluation of its centralized logging capabilities. Which of the following scenarios indicates a failure in more than one CIS Control?

AThe loghost is missing logs from 3 servers in the inventory

BThe loghost is receiving logs from hosts with different timezone values

CThe loghost time is out-of-sync with an external host

DThe loghost is receiving out-of-sync logs from undocumented servers

Show Suggested Answer

Suggested Answer: D

by Malinda at Apr 14, 2024, 02:59 AM

Limited Time Offer

25%

Off

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Olive

6 months ago

I believe both scenarios D and C point to potential failures, as maintaining accurate logs is crucial for security monitoring.

upvoted 0 times

...

Tamekia

6 months ago

That could also be a failure in a CIS Control, as it can impact the accuracy of log timestamps.

upvoted 0 times

...

Ling

6 months ago

But what about scenario C, where the loghost time is out-of-sync with an external host?

upvoted 0 times

...

Tracey

6 months ago

I agree with Tamekia, receiving out-of-sync logs from undocumented servers can compromise security.

upvoted 0 times

...

Tamekia

6 months ago

I think scenario D indicates a failure in multiple CIS Controls.

upvoted 0 times

...

Magnolia

6 months ago

I believe the key here is that scenario D involves logs from undocumented servers, which poses a bigger risk.

upvoted 0 times

...

Lore

7 months ago

But what about scenario A? Missing logs from 3 servers can also be a red flag.

upvoted 0 times

...

Hildred

7 months ago

Yes, I agree. Receiving out-of-sync logs from undocumented servers can cause problems with multiple controls.

upvoted 0 times

...

Annalee

7 months ago

I think scenario D indicates a failure in more than one CIS Control.

upvoted 0 times

...

Tonja

8 months ago

You know, I'm just glad I don't have to deal with this kind of logging nightmare at my job. Can you imagine the headache?

upvoted 0 times

Alease

7 months ago

Scenario C also sounds like a failure. Time synchronization is crucial for logging integrity.

upvoted 0 times

...

Camellia

7 months ago

Agreed. Having logs from undocumented servers could be a security risk.

upvoted 0 times

...

Alyssa

7 months ago

I think scenario D would indicate a failure in more than one CIS Control.

upvoted 0 times

...

Brande

8 months ago

Ooh, good point. And option B with different timezone values could be a failure in both log management and asset inventory controls.

upvoted 0 times

...

Lillian

8 months ago

Hmm, I'm not so sure. Option C with the loghost being out-of-sync with an external host could also be a failure in multiple controls, like time synchronization and log management.

upvoted 0 times

...

Emmett

8 months ago

I'm leaning towards option D. Having undocumented servers sending out-of-sync logs sounds like a pretty major problem that would likely impact multiple controls.

upvoted 0 times

...

Luisa

8 months ago

Yeah, it's not straightforward. We'll need to really think through each option and how it relates to the CIS Controls.

upvoted 0 times

...

Willard

8 months ago

This is a tricky question. I'm not entirely sure which scenario indicates a failure in more than one CIS Control, but I'll give it my best shot.

upvoted 0 times

...