최신GIAC Cyber Incident Leader GCIL - GCIL무료샘플문제

A. Encrypting critical files and services

B. Offering free security training to users

C. Threatening to leak sensitive data

D. Releasing decryption keys to select victims

A. Hands-on exercises using security tools

B. Restricting training to only the IT department

C. Simulated attack scenarios

D. Financial reporting training

A. To keep security information hidden from employees

B. To provide predefined steps for handling different types of incidents

C. To eliminate the need for training incident response teams

D. To ensure that only senior management is involved in incident response

A. System Administrator

B. Chief Information Officer (CIO)

C. Incident Response Coordinator

D. Security Analyst

A. Avoiding documentation of previous incidents

B. Conducting cybersecurity awareness programs

C. Providing access to necessary security tools and resources

D. Limiting communication between team members

A. Blocking all failed login attempts

B. Implementing passwordless authentication methods

C. Enforcing password complexity requirements

D. Using VPNs to encrypt traffic

A. Allowing only senior executives to handle cybersecurity incidents

B. Conducting regular incident response training and simulations

C. Waiting for an actual attack before forming a response team

D. Keeping security logs in separate locations without consolidation

A. To avoid regulatory penalties by keeping incidents private

B. To blame employees for security breaches

C. To document the incident for future reference and compliance

D. To eliminate the need for security monitoring

A. Rotate all cloud service credentials and API keys

B. Reconfigure storage permissions to restrict access

C. Conduct a full forensic investigation to identify the attacker

D. Disable all cloud storage access until further notice

A. Vulnerability scanning is performed after penetration testing

B. Penetration testing simulates real-world attacks, while vulnerability scanning identifies potential weaknesses without exploitation

C. Vulnerability scanning actively exploits systems, while penetration testing only identifies weaknesses

D. Penetration testing is automated, while vulnerability scanning is manual