A company's acceptable use policy prohibits access to social media during work hours. The security team wants to enforce this policy while still allowing access to business-related sites that may share infrastructure with social media. Which control should they implement?

Block all traffic to IP addresses owned by social media companies.

Use DNS filtering to block known social media domains.

Configure the firewall to block all traffic on port 443 to social media domains.

Deploy a web proxy that categorizes URLs and blocks the 'social networking' category.

A company's email gateway is blocking legitimate emails from a partner organization because the partner's domain fails SPF checks. The partner insists their mail is authentic. Which action should the administrator take to verify the partner's email authenticity while maintaining spoofing protection?

Add the partner's domain to an allowlist in the email gateway to bypass all checks.

Ask the partner to correct their SPF record to include all their legitimate sending IP addresses.

Configure the gateway to ignore SPF failures for any domain that has a DMARC policy of p=quarantine.

Disable SPF checking for all inbound mail to prevent future false positives.

An attacker sends emails to a company's finance team that appear to come from the CFO, requesting urgent wire transfers. The emails pass SPF and DKIM because the attacker compromised the CFO's account. Which type of attack is this, and what control would be most effective?

Malware attachment; sandbox all incoming emails

Whaling; block all external email to the finance team

Spoofing; strengthen SPF and DMARC policies

Spear phishing; implement multi-factor authentication and verify requests out-of-band

A company's web proxy currently blocks access to social media sites, but users are bypassing the proxy by using personal mobile hotspots. The security team wants to enforce the acceptable use policy even when users are off-network. Which solution should the team implement?

Increase the proxy's logging to identify users who bypass

Configure the firewall to block all non-corporate traffic

Deploy a cloud-based secure web gateway and require all user devices to route traffic through it

Block the use of personal hotspots at the network level

GIAC Critical Controls Certification

Domain 6Objective 2

Email and Web Browser Protections GCCC Practice Questions (Page 2)

Part of the Application and Network Security domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 55 practice questions to prepare you well beyond it. (estimate)

55questions here

11free pages

12concepts

Questions 6–10

6application · medium
A company's acceptable use policy prohibits access to social media during work hours. The security team wants to enforce this policy while still allowing access to business-related sites that may share infrastructure with social media. Which control should they implement?
Select an answer first
7application · medium
A company's email gateway is blocking legitimate emails from a partner organization because the partner's domain fails SPF checks. The partner insists their mail is authentic. Which action should the administrator take to verify the partner's email authenticity while maintaining spoofing protection?
Select an answer first
8application · medium
An attacker sends emails to a company's finance team that appear to come from the CFO, requesting urgent wire transfers. The emails pass SPF and DKIM because the attacker compromised the CFO's account. Which type of attack is this, and what control would be most effective?
Select an answer first
9expert · hard
A company's web proxy currently blocks access to social media sites, but users are bypassing the proxy by using personal mobile hotspots. The security team wants to enforce the acceptable use policy even when users are off-network. Which solution should the team implement?
Select an answer first
10foundation · easy
Which built-in browser feature helps prevent malicious scripts from running in the context of a webpage by isolating the rendering process?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCCC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCCC” is a trademark of its owner, used for identification only.

Email and Web Browser Protections GCCC Practice Questions (Page 2)

Questions 6–10

A company's acceptable use policy prohibits access to social media during work hours. The security team wants to enforce this policy while still allowing access to business-related sites that may share infrastructure with social media. Which control should they implement?

An attacker sends emails to a company's finance team that appear to come from the CFO, requesting urgent wire transfers. The emails pass SPF and DKIM because the attacker compromised the CFO's account. Which type of attack is this, and what control would be most effective?

A company's web proxy currently blocks access to social media sites, but users are bypassing the proxy by using personal mobile hotspots. The security team wants to enforce the acceptable use policy even when users are off-network. Which solution should the team implement?

Which built-in browser feature helps prevent malicious scripts from running in the context of a webpage by isolating the rendering process?

Keep studying — Application and Network Security