What is the primary purpose of sandboxing in an email gateway?

To block emails with large attachments

To execute suspicious attachments in a controlled environment to observe their behavior

To encrypt all email messages in transit

To filter emails based on the sender's reputation

How does local browser isolation differ from remote browser isolation?

Local isolation blocks all scripts, while remote isolation only blocks pop-ups

Local isolation encrypts web traffic, while remote isolation does not

Local isolation is only available on mobile devices

Local isolation runs web content in a sandbox on the user's device, while remote isolation runs it on a separate server

What is the primary purpose of DNS filtering?

To block access to malicious or inappropriate domains by preventing DNS resolution

To provide DNS hosting services

A user reports that a website they visited displayed a phishing page that asked for their corporate credentials. The URL was not in the web filter's blocklist. What should the security team do to prevent other users from visiting this site?

Submit the URL to a reputation service and add it to the web filter's blocklist if confirmed malicious.

Disable the user's internet access until they complete security training.

Block all URLs that contain the word 'login'.

Send a company-wide email warning users not to visit the site.

GIAC Critical Controls Certification

Domain 6Objective 2

Email and Web Browser Protections GCCC Practice Questions (Page 10)

Part of the Application and Network Security domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 55 practice questions to prepare you well beyond it. (estimate)

55questions here

11free pages

12concepts

Questions 46–50

46foundation · easy
What is the primary purpose of sandboxing in an email gateway?
Select an answer first
47foundation · easy
How does local browser isolation differ from remote browser isolation?
Select an answer first
48foundation · easy
Which email authentication protocol allows a domain owner to publish a list of IP addresses that are authorized to send email on behalf of that domain?
Select an answer first
49foundation · easy
What is the primary purpose of DNS filtering?
Select an answer first
50application · medium
A user reports that a website they visited displayed a phishing page that asked for their corporate credentials. The URL was not in the web filter's blocklist. What should the security team do to prevent other users from visiting this site?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCCC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCCC” is a trademark of its owner, used for identification only.