Online Access Free GCCC Practice Test

An organization is implementing a control for the Account Monitoring and Control CIS Control, and have set the Account Lockout Policy as shown below. What is the risk presented by these settings?

• A.Legitimate users could be unable to access resources.
• B.Once accounts are locked, they cannot be unlocked.
• C.Brute-force password attacks could be more effective.
• D.Password length and complexity will be automatically reduced.

Acme Corporation performed an investigation of its centralized logging capabilities. It found that the central server is missing several types of logs from three servers in Acme's inventory. Given these findings, what is the most appropriate next step?

• A.Perform analysis to identify the source of the logging problems
• B.Document the missing logs in the core evaluation report as a minor issue
• C.Define processes to manually review logs for the problem servers
• D.Restart or reinstall the logging service on each of the problem servers

What is the first step suggested before implementing any single CIS Control?

• A.Perform a gap analysis
• B.Perform a vulnerability scan
• C.Develop a roll-out schedule
• D.Develop an effectiveness test

To effectively implement the Data Protection CIS Control, which task needs to be implemented first?

• A.Employees need to be notified that proprietary data should be protected
• B.The organization's proprietary data needs to be identified
• C.The organization's proprietary data needs to be encrypted
• D.Appropriate file content matching needs to be configured

Which of the following baselines is considered necessary to implement the Boundary Defense CIS Control?

• A.Network Device Configuration Baselines
• B.Multi-Factor Authentication Standard
• C.Network Traffic/Service Baseline
• D.Network Information Flow