A user clicks a link in an email that leads to a newly registered domain. The secure web gateway checks the URL against a reputation database and finds no record. What should the gateway do to best protect the user?

Bypass the gateway and let the browser handle the URL

Allow the URL and log the visit for later review

Block the URL because the domain has no reputation history

Redirect the user to a search engine to verify the domain

A security team is choosing between an on-premises secure web gateway and a cloud-based SWG. The company has strict data residency requirements that prohibit sending sensitive data to certain countries. The team needs to inspect HTTPS traffic for malware. Which factor should most influence the decision?

The speed of the internet connection

The number of users to be protected

The geographic location of the SWG's data processing centers

How do browser extensions like script blockers reduce the attack surface of web applications?

By preventing the execution of potentially malicious scripts on web pages

A company has implemented advanced email filtering and sandboxing, but users still occasionally fall for phishing emails that pass the filters. The security team wants to reduce the success rate of these attacks. The company has a limited budget and cannot afford frequent training sessions. Which approach should the team take?

Implement a 'report phishing' button and provide immediate feedback to users who report

Send a monthly newsletter with phishing tips

Increase the spam filter's sensitivity to catch more phishing emails

Block all external email to reduce exposure

Which of the following is a common capability of a secure web gateway?

URL filtering and malware detection

GIAC Critical Controls Certification

Domain 6Objective 2

Email and Web Browser Protections GCCC Practice Questions (Page 3)

Part of the Application and Network Security domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 55 practice questions to prepare you well beyond it. (estimate)

55questions here

11free pages

12concepts

Questions 11–15

11application · medium
A user clicks a link in an email that leads to a newly registered domain. The secure web gateway checks the URL against a reputation database and finds no record. What should the gateway do to best protect the user?
Select an answer first
12expert · hard
A security team is choosing between an on-premises secure web gateway and a cloud-based SWG. The company has strict data residency requirements that prohibit sending sensitive data to certain countries. The team needs to inspect HTTPS traffic for malware. Which factor should most influence the decision?
Select an answer first
13foundation · easy
How do browser extensions like script blockers reduce the attack surface of web applications?
Select an answer first
14expert · hard
A company has implemented advanced email filtering and sandboxing, but users still occasionally fall for phishing emails that pass the filters. The security team wants to reduce the success rate of these attacks. The company has a limited budget and cannot afford frequent training sessions. Which approach should the team take?
Select an answer first
15foundation · easy
Which of the following is a common capability of a secure web gateway?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCCC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCCC” is a trademark of its owner, used for identification only.

Email and Web Browser Protections GCCC Practice Questions (Page 3)

Questions 11–15

A user clicks a link in an email that leads to a newly registered domain. The secure web gateway checks the URL against a reputation database and finds no record. What should the gateway do to best protect the user?

How do browser extensions like script blockers reduce the attack surface of web applications?

Which of the following is a common capability of a secure web gateway?

Keep studying — Application and Network Security