How do content filters help enforce acceptable use policies (AUP) in an organization?

By blocking all incoming emails

By blocking access to websites that fall into categories prohibited by the AUP

By monitoring employee keystrokes

An organization is considering deploying DNS filtering to block malicious domains. They also want to ensure that DNS responses are not tampered with. Which combination of controls should they implement?

Enable DNSSEC signing on the organization's internal DNS zones and use a web proxy for filtering.

Deploy DNS filtering and disable recursive resolution to prevent cache poisoning.

Deploy DNS filtering for domain blocking and enable DNSSEC validation on the organization's resolvers.

Use a secure web gateway that performs DNS filtering and SSL/TLS inspection.

A user reports that they clicked a link in a phishing email and entered their credentials on a fake login page. The security team has already reset the user's password. What should the team do next to contain the incident?

Run a full antivirus scan on the user's workstation

Disable the user's account permanently

Delete the phishing email from the user's mailbox

Block the phishing domain at the email gateway and web proxy

A security team is evaluating an email gateway that uses sandboxing. The gateway detonates attachments in a virtual machine, but the sandbox has no internet access. The team is concerned about malware that checks for internet connectivity before executing. What should the team do to improve detection?

Disable sandboxing and rely on signature-based detection

Provide the sandbox with simulated internet access and monitor outbound connections

Use a static analysis engine instead of sandboxing

Increase the sandbox timeout to allow more time for execution

What is the primary security benefit of remote browser isolation?

It executes web content in a remote environment, preventing malware from reaching the user's device

GIAC Critical Controls Certification

Domain 6Objective 2

Email and Web Browser Protections GCCC Practice Questions (Page 7)

Part of the Application and Network Security domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 55 practice questions to prepare you well beyond it. (estimate)

55questions here

11free pages

12concepts

Questions 31–35

31foundation · easy
How do content filters help enforce acceptable use policies (AUP) in an organization?
Select an answer first
32expert · hard
An organization is considering deploying DNS filtering to block malicious domains. They also want to ensure that DNS responses are not tampered with. Which combination of controls should they implement?
Select an answer first
33application · medium
A user reports that they clicked a link in a phishing email and entered their credentials on a fake login page. The security team has already reset the user's password. What should the team do next to contain the incident?
Select an answer first
34expert · hard
A security team is evaluating an email gateway that uses sandboxing. The gateway detonates attachments in a virtual machine, but the sandbox has no internet access. The team is concerned about malware that checks for internet connectivity before executing. What should the team do to improve detection?
Select an answer first
35foundation · easy
What is the primary security benefit of remote browser isolation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCCC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCCC” is a trademark of its owner, used for identification only.