GIAC (SANS)

GIAC Critical Controls Certification

GCCC

The GIAC Critical Controls Certification (GCCC) validates a practitioner's command of the CIS Critical Security Controls, a prioritized, risk-based approach to security. It is designed for security professionals, auditors, and risk officers who implement, execute, and audit these controls. Earning GCCC demonstrates you can operationalize standards and controls to effectively manage risk and defend your enterprise.

Practice Free Questions

7Domains

18Objectives

181Practice pages

872Free questions

GCCC free practice questions

Choose any objective and open any question page — no sign-in required.

Background on CIS Controls, Standards, and Governance

42 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–42

Service Provider Management

44 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–44

Inventory and Control of Enterprise Assets

44 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–44

Inventory and Control of Software Assets

54 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–54

Secure Configuration of Enterprise Assets and Software

53 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–53

Access Control Management

46 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–46

Account Management

48 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–48

Data Protection

58 questions · 12 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55 56–58

Data Recovery

38 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–38

Audit Log Management

49 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–49

Continuous Vulnerability Management

49 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–49

Network Monitoring and Defense

46 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–46

Malware Defenses

50 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50

Application Software Security

53 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–53

Email and Web Browser Protections

55 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55

Network Infrastructure Management

49 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–49

Incident Response Management

47 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–47

Penetration Testing

47 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–47

Want a smarter study session?Try adaptive questions aimed at your weak spots, the illustrated book, and readiness you can trust.

Continue Free Practice

Percentages reflect share of the current practice bank, not official exam weightings. Every page above is a live, crawlable practice page (18 objectives · 181 pages).

GIAC Critical Controls Certification

GCCC free practice questions

Domain 1 · Foundations and Governance10% of practice bank · 2 objectives · 86 questions10%

Domain 2 · Asset Management and Configuration17% of practice bank · 3 objectives · 151 questions17%

Domain 3 · Access and Identity Management11% of practice bank · 2 objectives · 94 questions11%

Domain 4 · Data Protection and Recovery11% of practice bank · 2 objectives · 96 questions11%

Domain 5 · Security Operations and Monitoring22% of practice bank · 4 objectives · 194 questions22%

Domain 6 · Application and Network Security18% of practice bank · 3 objectives · 157 questions18%

Domain 7 · Incident Response and Testing11% of practice bank · 2 objectives · 94 questions11%