Why is user education important in preventing malware infections?

Users can manually patch their systems

Users can detect zero-day exploits

Users are often the last line of defense against phishing and social engineering

A company has experienced multiple malware infections caused by employees opening malicious email attachments. The security team wants to reduce this risk. Which control is most directly targeted at this problem?

Implement application whitelisting on all endpoints.

Conduct regular security awareness training on phishing and email hygiene.

Deploy a network intrusion detection system (IDS).

Increase the frequency of antivirus signature updates.

Why is timely patching of operating systems and applications important for malware defense?

It removes known vulnerabilities that malware can exploit

It detects malware already on the system

It encrypts sensitive data on the system

It prevents all malware from executing

A company's vulnerability scanner reports that a critical application has a known remote code execution vulnerability. The vendor released a patch, but the IT team is concerned about downtime. What is the best course of action to reduce malware risk?

Rely on endpoint protection to detect exploitation attempts

Apply the patch during the next scheduled maintenance window

Disable the application until a patch can be applied

Wait for the next patch release from the vendor

GIAC Critical Controls Certification

Domain 5Objective 4

Malware Defenses GCCC Practice Questions (Page 5)

Part of the Security Operations and Monitoring domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~11–18 in this domain), expect 3–5 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

9concepts

Questions 21–25

21foundation · easy
Why is user education important in preventing malware infections?
Select an answer first
22application · medium
A company has experienced multiple malware infections caused by employees opening malicious email attachments. The security team wants to reduce this risk. Which control is most directly targeted at this problem?
Select an answer first
23foundation · easy
Why is timely patching of operating systems and applications important for malware defense?
Select an answer first
24foundation · easy
What is the first step in incident response after confirming a malware infection?
Select an answer first
25application · medium
A company's vulnerability scanner reports that a critical application has a known remote code execution vulnerability. The vendor released a patch, but the IT team is concerned about downtime. What is the best course of action to reduce malware risk?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCCC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCCC” is a trademark of its owner, used for identification only.