GSLC

GSLC practice questions, page 2 of 5, with answer review and explanations.

Question 6

Which of the following is an example of a compliance metric for a security awareness program?

  1. Was there a decrease in the severity of incidents after the awareness program was initiated?
  2. How many employees reported suspicious emails after awareness training compared to before training?
  3. Which regulatory requirements will be addressed by deploying an organization wide awareness program?
  4. What percentage of employees assigned to an awareness training module have completed the training?

Question 7

What type of network attack uses switch spoofing?

  1. VLAN hopping
  2. DHCP snooping
  3. Ping flooding
  4. Double tagging

Question 8

The statement below is an example of which of the following? For consumer market product lines, no single supplier’s exposure will exceed 30%

  1. Risk capacity
  2. Risk tolerance
  3. Risk analysis
  4. Risk profile

Question 9

Which of the following is a recommended function of the SOC’s command center?

  1. Approving and updating SOC policies
  2. Receiving internal and third-party security requests
  3. Managing network security monitoring devices
  4. Performing forensic analysis and reverse engineering

Question 10

An organization wants a perimeter device to inspect and transmit email requests from the internet to the internal email server. Which of the following is used for this purpose?

  1. Web proxy
  2. WAF
  3. Reverse proxy
  4. NIDS