Free Access GIAC.GCCC.v2022-09-29.q34 Practice Test (Page 7)

Question 26

An organization is implementing a control within the Application Software Security CIS Control. How can they best protect against injection attacks against their custom web application and database applications?

A.Check user input against a list of reserved database terms

B.Configure the web server to use Unicode characters only

C.Filter input to only allow safe characters and strings

D.Ensure the web application server logs are going to a central log host

Question 27

Which of the following actions would best mitigate against phishing attempts such as the example below?

A.Establishing email filters to block no-reply address emails

B.Recommending against the use of Google Docs

C.Having employee's complete user awareness training

D.Making web filters to prevent accessing Google Docs

Question 28

What is the relationship between a service and its associated port?

A.A service opens the port and listens for network traffic

B.A service relies on the port to select the protocol

C.A service closes a port after a period of inactivity

D.A service sets limits on the volume of traffic sent through the port

Question 29

During a security audit which test should result in a source packet failing to reach its intended destination?

A.A new connection request from the internet is sent to the company's DNS server

B.A packet originating from the company's DMZ is sent to a host on the company's internal network

C.A packet originating from the company's internal network is sent to the company's DNS server

D.A new connection request from the Internet is sent to a host on the company 's internal net work

Question 30

Which of the following is a benefit of stress-testing a network?

A.To determine the security configurations of the network

B.To determine bandwidth needs for the network.

C.To determine the connectivity of the network

D.To determine device behavior in a DoS condition.

Other Version: 1161GIAC.GCCC.v2022-03-26.q34

Latest Upload: 140Fortinet.NSE7_SSE_AD-25.v2026-09-05.q85; 192Microsoft.PL-400.v2026-09-05.q375; 303Snowflake.DEA-C01.v2026-09-04.q215; 195HP.HPE0-V27.v2026-09-04.q127; 291NAHQ.CPHQ.v2026-09-03.q481; 124SAP.C-S4CPB-2602.v2026-09-02.q7; 138Cisco.700-805.v2026-09-02.q86; 171MSSC.CLT-4.0.v2026-09-02.q43; 135Fitness.NCSF-CPT.v2026-09-02.q18; 205Google.Generative-AI-Leader.v2026-09-02.q77

Question 26

Question 27

Question 28

Question 29

Question 30

Download PDF File