Email and Web Browser Protections GCCC Practice Questions (Page 11)

Questions 51–55

1. 51application · medium

   An organization wants to prevent users from resolving domains that are known to host malware. They already have a web proxy that filters HTTP traffic. Which additional control would provide a first line of defense against malware domains?

   • AEnable DNSSEC on the organization's DNS servers.
   • BDeploy DNS filtering that blocks resolution of known malicious domains.
   • CConfigure the web proxy to block all HTTPS traffic.
   • DInstall a browser extension that blocks ads.
   Reveal Solution Discussion Select an answer first
2. 52foundation · easy

   What is the purpose of URL reputation services?

   • ATo encrypt URLs in web traffic
   • BTo shorten URLs for easier sharing
   • CTo assess the trustworthiness of a URL based on historical data and known threat intelligence
   • DTo block all pop-up windows
   Reveal Solution Discussion Select an answer first
4. 53expert · hard

   A security team is investigating a phishing campaign that uses URLs that are shortened by a legitimate URL shortener service. The final destination is a malicious site. The web filter's reputation service flags the shortened URL as benign because the shortener domain is reputable. What should the team configure to detect these attacks?

   • ARequire users to expand shortened URLs manually before clicking.
   • BDisable the reputation service for shortened URLs.
   • CEnable the web filter to follow redirects and perform reputation analysis on the final URL.
   • DBlock all URLs from the legitimate URL shortener service.
   Reveal Solution Discussion Select an answer first
5. 54foundation · easy

   Which email gateway technique involves analyzing the sender's historical behavior and domain reputation to determine if an email is likely malicious?

   • AReputation analysis
   • BContent filtering
   • CSandboxing
   • DEncryption
   Reveal Solution Discussion Select an answer first
6. 55application · medium

   A user receives an email with a link to a file-sharing site. The email gateway's reputation filter has never seen the domain before, but the attachment is a .docx file that passes content inspection. The security team wants to block the email if the link is malicious. Which additional control should be applied?

   • AQuarantine all emails with .docx attachments regardless of sender reputation.
   • BDeliver the email and rely on the user to report suspicious links.
   • CBlock the email because the domain is not in the allowlist.
   • DEnable URL reputation analysis that checks the link against real-time threat intelligence feeds.
   Reveal Solution Discussion Select an answer first