A company's security team discovers that attackers are sending emails that appear to come from the CEO's address, but the emails fail SPF and DKIM checks. The team wants to ensure that receiving mail servers reject or quarantine such messages. Which configuration should the team implement?

Configure the email gateway to block all messages with attachments

Add a second SPF record with a stronger 'all' mechanism

Set up a mail flow rule to prepend '[EXTERNAL]' to all incoming messages

Publish a DMARC policy of p=reject for the company's domain

A company wants to enforce an acceptable use policy that blocks access to social media and known malware-hosting domains. The solution must also log all web requests for compliance audits. Which control should the company implement?

Deploy a forward proxy with URL filtering and logging

Set browser home pages to a corporate intranet

Configure the firewall to block all outbound HTTPS traffic

Use a reverse proxy in front of the company's web servers

A security team needs to protect remote users who connect from home networks. The solution must inspect HTTPS traffic for malware and enforce web usage policies, but the users do not always connect through the corporate VPN. Which approach should the team choose?

Install a host-based firewall on each remote user's laptop

Deploy a cloud-based secure web gateway and route all user web traffic through it

Require users to connect through the VPN and use the existing on-premises proxy

Configure the home router to use a public DNS service

What is the purpose of click-to-play plugins in a web browser?

To require user interaction before loading plugin content, reducing the risk of automatic exploitation

To automatically update plugins

To encrypt plugin communications

An organization wants to inspect HTTPS traffic to block malware downloads from encrypted websites. They currently have a web proxy that only handles HTTP. Which upgrade should they make to achieve this goal?

Add a DNS filter that blocks known malicious domains.

Deploy a secure web gateway that performs SSL/TLS inspection.

Enable the browser's pop-up blocker for all users.

Configure the firewall to block all HTTPS traffic.

GIAC Critical Controls Certification

Domain 6Objective 2

Email and Web Browser Protections GCCC Practice Questions (Page 1)

Part of the Application and Network Security domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 55 practice questions to prepare you well beyond it. (estimate)

55questions here

11free pages

12concepts

Questions 1–5

1application · medium
A company's security team discovers that attackers are sending emails that appear to come from the CEO's address, but the emails fail SPF and DKIM checks. The team wants to ensure that receiving mail servers reject or quarantine such messages. Which configuration should the team implement?
Select an answer first
2application · medium
A company wants to enforce an acceptable use policy that blocks access to social media and known malware-hosting domains. The solution must also log all web requests for compliance audits. Which control should the company implement?
Select an answer first
3application · medium
A security team needs to protect remote users who connect from home networks. The solution must inspect HTTPS traffic for malware and enforce web usage policies, but the users do not always connect through the corporate VPN. Which approach should the team choose?
Select an answer first
4foundation · easy
What is the purpose of click-to-play plugins in a web browser?
Select an answer first
5application · medium
An organization wants to inspect HTTPS traffic to block malware downloads from encrypted websites. They currently have a web proxy that only handles HTTP. Which upgrade should they make to achieve this goal?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCCC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCCC” is a trademark of its owner, used for identification only.