최신 GCIL 무료덤프 - GIAC Cyber Incident Leader GCIL

문제1

Which of the following is a key step in incident closure?
Response:

A. Conducting a post-incident review to identify lessons learned

B. Preventing employees from reporting similar incidents in the future

C. Deleting all evidence to ensure secrecy

D. Ignoring documentation of the incident

정답: A

문제2

Which of the following actions help organizations improve future incident response?
(Select two.)
Response:

A. Not sharing remediation details with the incident response team

B. Developing a plan to prevent similar incidents

C. Training employees based on incident lessons learned

D. Closing the investigation without analyzing the root cause

정답: B,C

문제3

Which of the following details should be included in an incident report?
Response:

A. A list of terminated employees

B. Internal employee disputes and HR complaints

C. Incident timeline, impact analysis, and remediation steps

D. Irrelevant logs from unrelated systems

정답: C

문제4

Why should organizations establish incident response playbooks?
Response:

A. To ensure that only senior management is involved in incident response

B. To keep security information hidden from employees

C. To eliminate the need for training incident response teams

D. To provide predefined steps for handling different types of incidents

정답: D

문제5

Which of the following best describes a cloud-based attack that exploits misconfigured permissions in cloud storage?
Response:

A. SQL Injection

B. Cross-Site Scripting (XSS)

C. Insecure S3 Bucket Exposure

D. DNS Spoofing

정답: C

문제6

What are best practices for incident reporting?
(Select two.)
Response:

A. Using structured reporting templates

B. Exaggerating the impact to increase awareness

C. Ensuring reports are clear, accurate, and actionable

D. Avoiding written documentation to prevent leaks

정답: A,C

문제7

What is the primary goal of incident remediation in cybersecurity?
Response:

A. To analyze and document the incident but take no further action

B. To completely shut down the organization's network after an attack

C. To remove the threat, recover affected systems, and prevent recurrence

D. To inform only executive leadership and ignore technical teams

정답: C

문제8

Your organization experiences a suspected ransomware attack affecting critical business systems. As the incident response lead, what should be your first step in the incident assessment process?
Response:

A. Report the attack to all stakeholders, including customers

B. Restore affected systems from the last available backup

C. Identify and classify the incident based on severity and impact

D. Immediately shut down all servers to stop the attack

정답: C

최신 GCIL 무료덤프 - GIAC Cyber Incident Leader GCIL

우리와 연락하기

유용한 링크

최신 업데이트