A company has experienced multiple ransomware infections over the past year. The infections have been traced to phishing emails, RDP brute-force attacks, and drive-by downloads. The company wants to implement a comprehensive set of controls to reduce the risk of all three vectors. Which combination of controls would be MOST effective?

Endpoint detection and response (EDR) and regular backups.

Network segmentation and application whitelisting.

User awareness training and a strong password policy.

Email filtering, MFA for RDP, and web filtering.

GIAC Cyber Incident Leader

Domain 1Objective 4

Ransomware Attacks GCIL Practice Questions (Page 11)

Part of the Attack Types and Vectors domain, which makes up ~33% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~17–26 in this domain), expect 3–5 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

8concepts

Questions 51–51

51expert · hard
A company has experienced multiple ransomware infections over the past year. The infections have been traced to phishing emails, RDP brute-force attacks, and drive-by downloads. The company wants to implement a comprehensive set of controls to reduce the risk of all three vectors. Which combination of controls would be MOST effective?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GCIL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIL” is a trademark of its owner, used for identification only.

Ransomware Attacks GCIL Practice Questions (Page 11)

Questions 51–51

Keep studying — Attack Types and Vectors