How do content reputation services help identify malicious downloads?

By blocking all downloads from the internet

By analyzing the file's characteristics and comparing them to known malware signatures

By encrypting the downloaded file

By compressing files to reduce size

A security architect is evaluating browser isolation solutions. The organization has a mix of managed and unmanaged devices, and users need to access a legacy web application that requires browser plugins. Which browser isolation approach would best support this requirement?

Browser sandboxing that allows plugins to run in a sandbox.

Local browser isolation that runs the browser in a VM on each device.

Remote browser isolation that runs the legacy application in a remote container with the required plugins installed.

A secure web gateway that blocks all plugin usage.

A financial firm wants to allow employees to browse the web but wants to prevent any malware from executing on their local workstations if they visit a compromised site. Which approach provides the strongest containment?

Deploy remote browser isolation so that all web content executes in a remote container.

Require users to use a separate browser for personal browsing.

Install a web filter that blocks known malicious sites.

Enable the browser's built-in sandboxing feature.

What is the primary role of user awareness and training in mitigating email-based social engineering attacks?

To educate users on how to recognize and report suspicious emails

To automatically block all malicious emails before they reach the user

To enforce strong password policies

To encrypt all email communications

Which of the following is a common indicator of a phishing email that user training should teach employees to recognize?

The email is sent during business hours

Urgent language demanding immediate action

The email has a professional signature

The email is from a known colleague

GIAC Critical Controls Certification

Domain 6Objective 2

Email and Web Browser Protections GCCC Practice Questions (Page 6)

Part of the Application and Network Security domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 55 practice questions to prepare you well beyond it. (estimate)

55questions here

11free pages

12concepts

Questions 26–30

26foundation · easy
How do content reputation services help identify malicious downloads?
Select an answer first
27expert · hard
A security architect is evaluating browser isolation solutions. The organization has a mix of managed and unmanaged devices, and users need to access a legacy web application that requires browser plugins. Which browser isolation approach would best support this requirement?
Select an answer first
28application · medium
A financial firm wants to allow employees to browse the web but wants to prevent any malware from executing on their local workstations if they visit a compromised site. Which approach provides the strongest containment?
Select an answer first
29foundation · easy
What is the primary role of user awareness and training in mitigating email-based social engineering attacks?
Select an answer first
30foundation · easy
Which of the following is a common indicator of a phishing email that user training should teach employees to recognize?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCCC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCCC” is a trademark of its owner, used for identification only.