GIAC Critical Controls Certification
Domain 5Objective 3
Network Monitoring and Defense GCCC Practice Questions (Page 10)
Part of the Security Operations and Monitoring domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~11–18 in this domain), expect 3–5 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)
46questions here
10free pages
8concepts
Questions 46–46
- 46
A security analyst notices a sudden spike in outbound DNS queries from a single workstation to a domain that was recently added to a threat intelligence blocklist. The workstation is a developer's machine that frequently uses dynamic DNS for testing. The analyst must determine whether this is a real infection or a false positive. Which approach best balances speed and accuracy?
Select an answer first
Finished these 1 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to GCCC
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCCC” is a trademark of its owner, used for identification only.