Email and Web Browser Protections GCCC Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   What is the purpose of the browser's safe browsing feature?

   • ATo prevent cookies from being stored
   • BTo encrypt web traffic
   • CTo block all pop-up windows
   • DTo warn users when they attempt to visit known malicious or deceptive websites
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   What is the primary function of a web proxy in an organization?

   • ATo act as an intermediary between users and the internet, forwarding requests and enforcing policies
   • BTo host web applications
   • CTo block all advertisements
   • DTo encrypt all web traffic
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   An organization's users frequently visit websites that host malicious scripts. The security team wants to use built-in browser features to reduce the risk of drive-by downloads without deploying additional software. Which browser feature should the team enable?

   • AAutomatic form-fill for saved credentials
   • BSafe Browsing with real-time URL reputation checks
   • CDeveloper tools console
   • DPop-up blocker for all sites
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A security analyst is reviewing emails that bypassed the gateway's filters. One email contained a link to a legitimate file-sharing site that was later compromised to host malware. The email passed content inspection and the domain had a good reputation. Which combination of controls would have most likely detected this threat?

   • ABlocking all links to file-sharing sites.
   • BRequiring users to hover over links before clicking.
   • CSandboxing the URL by opening it in a virtualized environment to observe behavior.
   • DIncreasing the frequency of reputation checks to every hour.
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   A company has a mature security awareness program, but a recent spear phishing attack targeted two executives with personalized emails that referenced their recent public speaking engagements. The emails passed the email gateway's filters. The executives clicked the link and entered credentials. What is the most effective additional control to reduce the risk of this type of attack succeeding?

   • AImplement multi-factor authentication (MFA) for all users, especially executives.
   • BIncrease the frequency of phishing simulations for executives.
   • CDeploy a web filter that blocks all social media sites.
   • DBlock all emails that contain the executives' names.
   Reveal Solution Discussion Select an answer first