What is the primary security benefit of network segmentation?

Limiting the blast radius of a security breach

Eliminating the need for firewalls

Simplifying IP address management

What is the primary purpose of log aggregation in a security operations center?

To reduce the size of log files

To replace the need for security monitoring

To generate new logs automatically

To centralize logs from multiple sources for easier correlation and analysis

An organization is collecting logs from multiple sources into a central SIEM. The security team notices that some critical events are missing from the SIEM, particularly from network devices. What is the most likely cause?

The network devices are not configured to send logs to the SIEM

The SIEM is correctly filtering out low-priority events

The logs are being sent in an unsupported format

The SIEM is not powerful enough to process all events

A company's SOC uses signature-based IDS but has been missing new malware variants that are not yet in the signature database. The security team wants to improve detection of these unknown threats. Which approach would be most effective?

Increase the frequency of signature updates to the IDS.

Enable deep packet inspection on the firewall to inspect all traffic for malicious patterns.

Deploy a network-based anomaly detection system that uses machine learning to establish a baseline and flag deviations.

Integrate a threat intelligence feed of indicators of compromise (IOCs) into the IDS to block known malicious IPs and domains.

GIAC Critical Controls Certification

Domain 5Objective 3

Network Monitoring and Defense GCCC Practice Questions (Page 9)

Part of the Security Operations and Monitoring domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~11–18 in this domain), expect 3–5 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

8concepts

Questions 41–45

41foundation · easy
What is the primary security benefit of network segmentation?
Select an answer first
42foundation · easy
Which tool is specifically designed to capture and analyze individual packets on a network interface?
Select an answer first
43foundation · easy
What is the primary purpose of log aggregation in a security operations center?
Select an answer first
44application · medium
An organization is collecting logs from multiple sources into a central SIEM. The security team notices that some critical events are missing from the SIEM, particularly from network devices. What is the most likely cause?
Select an answer first
45application · medium
A company's SOC uses signature-based IDS but has been missing new malware variants that are not yet in the signature database. The security team wants to improve detection of these unknown threats. Which approach would be most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCCC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCCC” is a trademark of its owner, used for identification only.