GIAC Cyber Incident Leader GCIL 認定 GCIL 試験問題:

1. What is the primary purpose of a vulnerability management program?
Response:

A) To eliminate all vulnerabilities in an organization's infrastructure
B) To identify, prioritize, and remediate security weaknesses before attackers exploit them
C) To monitor insider threats within an organization
D) To enforce compliance with legal regulations without improving security

2. Which security control is most effective at preventing credential stuffing attacks?
Response:

A) Role-based access control (RBAC)
B) Using multi-factor authentication (MFA)
C) Deploying Web Application Firewalls (WAF)
D) Implementing strong password policies

3. Which of the following is a key step in incident closure?
Response:

A) Ignoring documentation of the incident
B) Conducting a post-incident review to identify lessons learned
C) Deleting all evidence to ensure secrecy
D) Preventing employees from reporting similar incidents in the future

4. Which of the following should be considered when designing an effective incident response training program?
(Select two.)
Response:

A) Simulated attack scenarios
B) Financial reporting training
C) Restricting training to only the IT department
D) Hands-on exercises using security tools

5. What is the main objective of incident preparation?
Response:

A) Reducing IT security budgets
B) Reacting to incidents as they occur
C) Ignoring minor security threats
D) Establishing proactive strategies to detect, respond to, and mitigate incidents

質問と回答：