GIAC Critical Controls Certification
Domain 6Objective 2
Email and Web Browser Protections GCCC Practice Questions (Page 9)
Part of the Application and Network Security domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 55 practice questions to prepare you well beyond it. (estimate)
55questions here
11free pages
12concepts
Questions 41–45
- 41
An organization is considering two options to protect users from web-based malware: enabling the browser's built-in sandboxing or deploying a remote browser isolation solution. The organization has a limited budget and users frequently need to upload large files to a web application. Which factor should most influence the decision?
Select an answer first - 42
Which email authentication protocol uses a digital signature to verify that an email message was not altered in transit and was sent by an authorized sender?
Select an answer first - 43
What is the primary function of a secure web gateway (SWG)?
Select an answer first - 44
After a spear-phishing campaign tricked several employees into entering credentials on a fake login page, the security team wants to reduce the likelihood of similar incidents. The email gateway already blocks known malicious senders and attachments. Which additional control should the team prioritize?
Select an answer first - 45
Which email attack involves an attacker forging the 'From' address of an email to make it appear as if it came from a trusted source?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCCC” is a trademark of its owner, used for identification only.