What is the purpose of periodically reviewing user accounts and privileges?

To ensure that users have only the access necessary for their roles

To ensure all users have the same level of access

To simplify the password reset process

To increase the number of administrator accounts

A university's research lab has a high-performance computing (HPC) cluster used by multiple research groups. The security team needs to ensure that user account activities are logged and that logs are protected from tampering. Which logging configuration is most appropriate?

Log only successful logins and ignore failed attempts

Allow users to delete their own logs to save storage

Forward logs to a central log server with restricted access and integrity monitoring

Store logs on each node's local disk with no central collection

What is the primary goal of continuous monitoring and alerting?

To reduce the number of user accounts

To replace the need for security patches

To detect security-relevant events and respond in a timely manner

To ensure all systems run the same operating system

A critical system is found to be running a service that is not required for its business function. According to least-privilege principles, what is the most appropriate action?

Disable or remove the unnecessary service

Change the service to run under a higher-privileged account

Leave the service running but restrict access via firewall

Monitor the service for unusual activity

What is the primary purpose of a patch management process?

To monitor system performance and availability

To configure system logging and alerting

To mitigate known vulnerabilities by applying security updates

To replace all software with the latest versions

GIAC Critical Infrastructure Protection (GCIP)

Domain 2Objective 3

System Security Management GCIP Practice Questions (Page 9)

Part of the Cyber System Identification and Protection domain, which makes up ~23% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~16–28 in this domain), expect 5–9 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

7concepts

Questions 41–45

41foundation · easy
What is the purpose of periodically reviewing user accounts and privileges?
Select an answer first
42application · medium
A university's research lab has a high-performance computing (HPC) cluster used by multiple research groups. The security team needs to ensure that user account activities are logged and that logs are protected from tampering. Which logging configuration is most appropriate?
Select an answer first
43foundation · easy
What is the primary goal of continuous monitoring and alerting?
Select an answer first
44foundation · easy
A critical system is found to be running a service that is not required for its business function. According to least-privilege principles, what is the most appropriate action?
Select an answer first
45foundation · easy
What is the primary purpose of a patch management process?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCIP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIP” is a trademark of its owner, used for identification only.