Which of the following is a key consideration when configuring system logging for security events?

Ensuring logs are retained for an appropriate period

Storing logs in plain text on the local system

Disabling logging to improve performance

A regional water utility's remote operators access the SCADA system from laptops over the internet. The utility wants to enforce strong authentication without requiring additional hardware tokens. What is the most appropriate mechanism?

Use a single sign-on (SSO) solution that remembers the session for 30 days.

Require a long, complex password that changes every 30 days.

Implement multi-factor authentication using a software-based authenticator app on the operators' smartphones.

Allow access only from the utility's VPN, which uses a shared pre-shared key.

A software development company has a policy that developers should not have production access. However, a developer needs to view production logs to troubleshoot an issue. Which action is most appropriate?

Copy the relevant logs to a development environment for the developer to review

Deny the request and tell the developer to work without the logs

Provide the developer with the production administrator password

Grant the developer temporary read-only access to the production log server for a limited time

Which control is specifically designed to prevent unauthorized executable files from running on a system?

Intrusion detection system (IDS)

A food processing company has a mix of legacy Windows XP machines and modern Windows 10 machines on the factory floor. The legacy machines cannot run the latest antivirus software. The security team wants to implement malicious code prevention across all machines. Which approach is most effective?

Replace all legacy machines immediately

Use application whitelisting on the legacy machines and antivirus on the modern machines

Force the legacy machines to run the latest antivirus software

Disconnect the legacy machines from the network and use them as standalone

GIAC Critical Infrastructure Protection (GCIP)

Domain 2Objective 3

System Security Management GCIP Practice Questions (Page 5)

Part of the Cyber System Identification and Protection domain, which makes up ~23% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~16–28 in this domain), expect 5–9 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

7concepts

Questions 21–25

21foundation · easy
Which of the following is a key consideration when configuring system logging for security events?
Select an answer first
22application · medium
A regional water utility's remote operators access the SCADA system from laptops over the internet. The utility wants to enforce strong authentication without requiring additional hardware tokens. What is the most appropriate mechanism?
Select an answer first
23application · medium
A software development company has a policy that developers should not have production access. However, a developer needs to view production logs to troubleshoot an issue. Which action is most appropriate?
Select an answer first
24foundation · easy
Which control is specifically designed to prevent unauthorized executable files from running on a system?
Select an answer first
25expert · hard
A food processing company has a mix of legacy Windows XP machines and modern Windows 10 machines on the factory floor. The legacy machines cannot run the latest antivirus software. The security team wants to implement malicious code prevention across all machines. Which approach is most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCIP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIP” is a trademark of its owner, used for identification only.