A retail chain's point-of-sale (POS) systems run a custom application that is not frequently updated. The security team has identified a critical vulnerability in the underlying operating system. The POS systems are in a segmented network and cannot be taken offline during business hours. Which approach best mitigates the risk while maintaining availability?

Apply virtual patching through the network security controls and schedule a maintenance window for the actual patch

Immediately deploy the patch to all POS systems during business hours

Disable the POS systems from the network until the patch is applied

Ignore the vulnerability because the network is segmented

A government agency has a mix of Windows and Linux servers. They want to deploy a malicious code prevention solution that works across both platforms and provides centralized reporting. Which approach is most appropriate?

Enable application whitelisting only on Windows servers

Install a different antivirus product on each server and review reports manually

Use only host-based firewalls on all servers

Deploy a cross-platform endpoint protection platform (EPP) with a central management console

A defense contractor's facility uses a legacy access control system for a secure area. The system uses proximity cards with a 4-digit PIN. The security team wants to upgrade to a more secure authentication method, but the facility has a limited budget and the system must remain operational 24/7. What is the most practical upgrade?

Implement a mobile credential system that uses Bluetooth and a one-time passcode.

Increase the PIN length to 6 digits and require card plus PIN for access.

Add a biometric fingerprint reader to the existing card readers.

Replace all proximity cards with smart cards that support cryptographic authentication.

What is the primary function of antivirus software?

Detect and remove known malicious code

Monitor network traffic for intrusions

GIAC Critical Infrastructure Protection (GCIP)

Domain 2Objective 3

System Security Management GCIP Practice Questions (Page 10)

Part of the Cyber System Identification and Protection domain, which makes up ~23% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~16–28 in this domain), expect 5–9 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

7concepts

Questions 46–49

46application · medium
A retail chain's point-of-sale (POS) systems run a custom application that is not frequently updated. The security team has identified a critical vulnerability in the underlying operating system. The POS systems are in a segmented network and cannot be taken offline during business hours. Which approach best mitigates the risk while maintaining availability?
Select an answer first
47application · medium
A government agency has a mix of Windows and Linux servers. They want to deploy a malicious code prevention solution that works across both platforms and provides centralized reporting. Which approach is most appropriate?
Select an answer first
48expert · hard
A defense contractor's facility uses a legacy access control system for a secure area. The system uses proximity cards with a 4-digit PIN. The security team wants to upgrade to a more secure authentication method, but the facility has a limited budget and the system must remain operational 24/7. What is the most practical upgrade?
Select an answer first
49foundation · easy
What is the primary function of antivirus software?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GCIP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIP” is a trademark of its owner, used for identification only.

System Security Management GCIP Practice Questions (Page 10)

Questions 46–49

A government agency has a mix of Windows and Linux servers. They want to deploy a malicious code prevention solution that works across both platforms and provides centralized reporting. Which approach is most appropriate?

What is the primary function of antivirus software?

Keep studying — Cyber System Identification and Protection