Home
GIAC
GSEC: GIAC Security Essentials Dumps

Free GIAC GSEC Exam Dumps May 2026

Here you can find all the free questions related with GIAC Security Essentials (GSEC) exam. You can also find on this page links to recently updated premium files with which you can practice for actual GIAC Security Essentials Exam. These premium versions are provided as GSEC exam practice tests, both as desktop software and browser based application, you can use whatever suits your style. Feel free to try the GIAC Security Essentials Exam premium files for free, Good luck with your GIAC Security Essentials Exam.

Question No: 1

MultipleChoice

With regard to defense-in-depth, which of the following statements about network design principles is correct?

Options

AA secure network design requires that systems that have access to the Internet should not be accessible from the Internet and that systems accessible from the Internet should not have access to the Internet.

BA secure network design requires that networks utilize VLAN (Virtual LAN) implementations to insure that private and semi-public systems are unable to reach each other without going through a firewall.

CA secure network design will seek to provide an effective administrative structure by providing a single choke-point for the network from which all security controls and restrictions will be enforced.

DA secure network design will seek to separate resources by providing a security boundary between systems that have different network security requirements.

Answer
D

Question No: 2

MultipleChoice

Which of the following is a name, symbol, or slogan with which a product is identified?

Options

ACopyright

BTrademark

CTrade secret

DPatent

Answer
B

Question No: 3

MultipleChoice

You are responsible for technical support at a company. One of the employees complains that his new laptop cannot connect to the company wireless network. You have verified that he is entering a valid password/passkey. What is the most likely problem?

Options

AA firewall is blocking him.

BHis laptop is incompatible.

CMAC filtering is blocking him.

DHis operating system is incompatible.

Answer
C

Question No: 4

MultipleChoice

Which of the following directories contains the log files in Linux?

Options

A/log

B/root

C/var/log

D/etc

Answer
CExplanation

Log files store errors and warnings generated by a Linux system. In Linux, the SYSLOGD and KLOGD utilities are used for logging errors and debugging messages. Log files help in tracking down these problems. Linux stores the logging configuration in the /etc/syslog.conf file. Log files are stored in the /var/log directory.

Following are some of the important log files:

/var/log/messages: The kernel and system errors are written in this file. Administrators should check this file daily for warning

messages.

/var/log/wtmp: The time and date of user logins are written in this file. Suspicious activities of users can be tracked down through this file.

/var/log/dmesg: The results of the last system boot is written in this file. It stores kernel messages that appear during the boot

stage. This file helps in tracking down the boot time problems.

Answer option B is incorrect. The /root directory represents the root user's home directory.

Answer option D is incorrect. The /etc directory contains administrative configuration files.

Answer option A is incorrect. There is no directory such as /log in Linux.

Question No: 5

MultipleChoice

Which of the following is a security threat if included in the search path of a computer?

Options

A/usr

B/sbin

D/usr/bin

Answer
CExplanation

Keeping . (dot) in a root's path is considered to be a major security concern. A hacker can use this place to keep his own version of well-known and highly used commands, such as LS. When the root user will run that command, the changed program will run with privileges of the root user. This can be one of the greatest security risks. The . (dot) should not be included in the root's path.

Question No: 6

MultipleChoice

John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network. John is working as a root user on the Linux operating system. He executes the following command in the terminal:

echo $USER, $UID

Which of the following will be displayed as the correct output of the above command?

Options

Aroot, 500

Broot, 0

CJohn, 502

DJohn, 0

Answer
BExplanation

According to the scenario, John is a root user. Hence, the value of the environmental variables $USER and $UID will be root and 0, respectively.

Question No: 7

MultipleChoice

Which of the following is used to implement a procedure to control inbound and outbound traffic on a network?

Options

ACookies

BSam Spade

CNIDS

DACL

Answer
DExplanation

Access Control List (ACL) is the most commonly method used to implement a procedure to control inbound and outbound traffic on the network.

It filters traffic packets by controlling whether or not inbound and outbound packets are forwarded or blocked at the router's interfaces.

According to the criteria specified within the access lists, router determines whether the packets are to be forwarded or dropped. Access

control list criteria could be the source or destination address of the traffic or other information.

Answer option A is incorrect. A cookie is a small bit of text that accompanies requests and pages as they move between Web servers and

browsers. It contains information that is read by a Web application, whenever a user visits a site. Cookies are stored in the memory or hard

disk of client computers. A Web site stores information, such as user preferences and settings in a cookie. This information helps in providing

customized services to users. There is absolutely no way a Web server can access any private information about a user or his computer

through cookies, unless a user provides the information. A Web server cannot access cookies created by other Web servers.

Answer option B is incorrect. Sam Spade is a penetration-testing tool that is used in the discovery phase. It provides GUI graphics and a lot of

functionalities. It can perform mainly whois queries, ping requests, DNS requests, tracerouting, OS finger-printing, zone transferring, SMTP mail

relay checking, and Web site crawling and mirroring. Sam Spade runs on Windows operating systems.

Answer option C is incorrect. A Network-based Detection System (NIDS) analyzes data packets flowing through a network. It can detect

malicious packets that are designed to be overlooked by a firewall's simplistic filtering rules. It is responsible for detecting anomalous or

inappropriate data that may be considered 'unauthorized' on a network. An NIDS captures and inspects all data traffic, regardless of whether

or not it is permitted for checking.

Question No: 8

MultipleChoice

You work as a Network Administrator for Perfect World Inc. You are configuring a network that will include 1000BaseT network interface cards in servers and client computers. What is the maximum segment length that a 1000BaseT network supports?

Options

A100 meters

B480 meters

C1000 meters

D10 meters

Answer
AExplanation

The maximum segment length that a 1000BaseT network supports is 100 meters. Type 1000BaseT network uses 5-level encoding and Cat 5 UTP media. It can provide data transmission speeds of up to 1000 megabits per second.

Question No: 9

MultipleChoice

The /cat/etc/passwd file on a client computer contains the following entry:

Martha:x:::::bin/false

Which of the following is true for Martha?

Options

AMartha's password is x.

BMartha has full access on the computer.

CMartha has limited access on the computer.

DMartha has been denied access on the computer.

Answer
DExplanation

In order to deny access to a user account, an invalid shell such as /bin/false should be assigned for the user account in the /etc/passwd file. When an invalid shell is assigned to a user account, a user cannot use the computer. You can take the following steps to deny access for a user to the computer:

1.Edit the /etc/passwd file and make the appropriate changes.

2.Use the -s switch with the USERMOD command.

3.Use CHSH -s /bin/false <user name> command.

Alternatively, you can use the USERMOD -l <user name> command at the command prompt to lock the user account.

Question No: 10

MultipleChoice

Which of the following is not an encryption technology?

Options

ABlowfish

BKILL

C3DES

DMD5

Answer
BExplanation

KILL is a command used to terminate a specified process.

Answer options A, C, and D are incorrect. Blowfish, 3DES, and MD5 are encryption technologies used to secure the communication between computers on the network.

Question No: 11

MultipleChoice

Which of the following statements regarding Secure Sockets Layer (SSL) are true?

Each correct answer represents a complete solution. Choose all that apply.

Options

ASSL provides message integrity to prevent alteration to the message.

BDuring SSL session, information is encrypted to prevent unauthorized disclosure.

CSSL can process credit cards.

DSSL can support 128-bit encryption.

Answer
A, B, DExplanation

Secure Sockets Layer (SSL) is a protocol used to transmit private documents via the Internet. SSL uses a combination of public key and symmetric encryption to provide communication privacy, authentication, and message integrity. Using the SSL protocol, clients and servers can

communicate in a way that prevents eavesdropping and tampering of data on the Internet. Many Web sites use the SSL protocol to obtain confidential user information, such as credit card numbers. By convention, URLs that require an SSL connection start with https: instead of http:. By default, SSL uses port 443 for secured communication.

Answer option C is incorrect. SSL can only secure the communication transport. Processing of credit cards cannot be done by SSL.

Question No: 12

MultipleChoice

Which of the following terms refers to manual assignment of IP addresses to computers and devices?

Options

AStatic IP addressing

BSpoofing

CAPIPA

DDynamic IP addressing

Answer
AExplanation

The Static IP addressing is the term used for manual assignment of IP addresses to computers and devices.

Answer option C is incorrect. Automatic Private IP Addressing (APIPA) is a Windows feature, which allows household users and small business

users to create a functional single subnet TCP/IP network without manually configuring the TCP/IP protocol or setting up a DHCP server.

Answer option D is incorrect. Dynamic IP addressing is used when IP addresses are assigned to computers and devices automatically by the

DHCP service or APIPA.

Answer option B is incorrect. Spoofing is a technique that makes a transmission appear to have come from an authentic source by forging the

IP address, email address, caller ID, etc. In IP spoofing, a hacker modifies packet headers by using someone else's IP address to hide his

identity. However, spoofing cannot be used while surfing the Internet, chatting on-line, etc. because forging the source IP address causes the

responses to be misdirected.

Question No: 13

MultipleChoice

You have a customer who wants to put wireless internet in his remote cabin. The cabin is many miles from any other building with internet connectivity or access points. What should you recommend?

Options

ADSL

BFIOS connection

CSatellite internet

DMicrowave connection

Answer
CExplanation

Much like Satellite TV, Satellite internet does not require any physical connectivity and is available almost anywhere on the planet, since it uses orbiting satellites for connectivity. Speeds are not as fast as DSL, and the connectivity can be expensive.

Answer option D is incorrect. Microwave connections are very expensive and not available for residential internet use.

Answer options B and A are both incorrect. Both require local, physical connections and would not be available in a remote rural area.

Question No: 14

MultipleChoice

What is the maximum cable segment length supported by a 10BaseT network?

Options

A100 meters

B300 meters

C250 meters

D500 meters

E150 meters

Answer
AExplanation

The most widely used Ethernet networks are 10BASE-T, 100BASE-TX, and 1000BASE-T (Gigabit Ethernet), running at 10 Mbit/s, 100 Mbit/s,

and 1000 Mbit/s (1 Gbit/s) respectively. These three standards all use the same connectors. Higher speed implementations nearly always

support the lower speeds as well, so that in most cases different generations of equipment can be freely mixed. They use 8 position modular

connectors, usually called RJ45 in the context of Ethernet over twisted pair. The cables usually used are four-pair or above twisted pair cable.

Each of the three standards support both full-duplex and half-duplex communication. According to the standards, they all operate over

distances of 'up to 100 meters'.

Question No: 15

MultipleChoice

Mark works as a Network Administrator for NetTech Inc. The company has a Windows 2003 domain-based network. The company has two offices in different cities. The offices are connected through the Internet. Both offices have a Windows 2003 server named SERV1 and SERV2 respectively. Mark is required to create a secure connection between both offices. He configures a VPN connection between the offices using the two servers. He uses L2TP for VPN and also configures an IPSec tunnel. Which of the following will he achieve with this configuration?

Each correct answer represents a part of the solution. Choose two.

Options

AEncryption for the local files stored on the two servers

BHighest possible encryption for traffic between the offices

CMutual authentication between the two servers

DExtra bandwidth on the Internet connection

Answer
B, CExplanation

Configuration of an L2TP VPN connection and an IPSec tunnel between the offices, will provide the highest possible encryption for traffic between the offices as well as mutual authentication between the two servers.

L2TP uses IPSec for data encryption. This will ensure the highest possible level of encryption for traffic between the two offices, as well as mutual authentication without any additional hardware or software.

Question No: 16

MultipleChoice

Which of the following frequencies are used by wireless standard 802.11n to operate?

Each correct answer represents a complete solution. Choose two.

Options

A1 Ghz

B2 Ghz

C2.4 Ghz

D5 Ghz

Answer
C, DExplanation

The wireless standard 802.11n operates at 2.4 Ghz and 5 Ghz frequencies.

IEEE 802.11n is an upcoming improvement to the IEEE 802.11-2007 wireless networking standard to improve network throughput over

previous standards, such as 802.11b and 802.11g. The IEEE 802.11n standard offers data rates from 54 Mbps to a maximum of 600 Mbps.

The current state of the art supports a physical rate of 450 Mbps, with the use of 3 spatial streams at a channel width of 40 MHz. Depending

on the environment, this may translate into a user throughput of 110 Mbps.

Question No: 17

MultipleChoice

Which of the following terms describes software technologies that improve portability, manageability and compatibility of applications by encapsulating them from the underlying operating system on which they are executed?

Options

AApplication virtualization

BEncapsulation

CSystem hardening

DFailover

Answer
AExplanation

Application virtualization is an umbrella term that describes software technologies that improve portability, manageability and compatibility of

applications by encapsulating them from the underlying operating system on which they are executed. A fully virtualized application is not

installed in the traditional sense, although it is still executed as if it is. The application is fooled at runtime into believing that it is directly

interfacing with the original operating system and all the resources are managed by it, when in reality it is not. Application virtualization differs

from operating system virtualization in that in the latter case, the whole operating system is virtualized rather than only specific applications.

Answer option C is incorrect. System hardening is a term used for securing an operating system. It can be achieved by installing the latest

service packs, removing unused protocols and services, and limiting the number of users with administrative privileges.

Answer option B is incorrect. Encapsulation is an object-oriented programming term used to define the ability to contain and hide information

about an object, such as internal data structures and code. Encapsulation isolates the internal complexity of an object's operation from the

rest of the application. For example, when you set the width property on a command button, you do not need to know how the value is

stored and how the command button is resized.

Answer option D is incorrect. Failover is a term associated with cluster services. It refers to the ability of a server to immediately start servicing

the requests if a primary server fails. If the application services in a cluster-node fail, the Cluster Service generally tries to restart them on the

same node. If the services do not start, then it moves the services to another node in the cluster and restarts them on that node.

Question No: 18

MultipleChoice

Which of the following records is the first entry in a DNS database file?

Options

ASOA

BSRV

CCNAME

DMX

Answer
AExplanation

Start of Authority (SOA) record is the first record in any DNS database file. The SOA resource record includes the following fields: owner, TTL,

class, type, authoritative server, refresh, minimum TTL, etc.

Answer option C is incorrect. Canonical Name (CNAME) is a resource record that creates an alias for the specified Fully Qualified Domain Name

(FQDN). It hides the implementation details of a network from the clients that are connected to the network.

Answer option D is incorrect. MX is a mail exchange resource record in the database file of a DNS server. It specifies a mail exchange server for

a DNS domain name.

Answer option B is incorrect. SRV resource record is a DNS record that enables users to specify the location of servers for a specific service,

protocol, and DNS domain. For example, if there are two servers in a domain, creating SRV records specifies which hosts serve as Web

servers, and resolvers can then retrieve all the SRV resource records for the Web servers.

Question No: 19

MultipleChoice

Which of the following devices connects two segments of the same local area network (LAN) but keeps traffic separate on the two segments?

Options

AHub

BModem

CBridge

DSwitch

Answer
CExplanation

A bridge connects two segments of the same LAN but keeps traffic separate on the two segments.

A bridge is an interconnectivity device that connects two local area networks (LANs) or two segments of the same LAN using the same

communication protocols, and provides address filtering between them. Users can use this device to divide busy networks into segments and

reduce network traffic. A bridge broadcasts data packets to all the possible destinations within a specific segment. Bridges operate at the

data-link layer of the OSI model.

Answer option B is incorrect. Modem stands for Modulator-Demodulator. It is a device that enables a computer to transmit information over standard telephone lines. Since a computer stores information digitally and a telephone line is analog, a modem converts digital signals to analog and vice versa. The conversion of a digital signal to analog is known as modulation and that of an analog signal to digital is known as demodulation.

Answer option D is incorrect. A switch is a network connectivity device that brings media segments together in a central location. It reads the

destination's MAC address or hardware address from each incoming data packet and forwards the data packet to its destination. This reduces

the network traffic. Switches operate at the data-link layer of the OSI model.

Answer option A is incorrect. A hub is a device used to link computers in a network. It connects computers that have a common architecture,

such as Ethernet, ARCnet, FDDI, or Token Ring. All hub-computer connections for a particular network use the same type of cable, which can

be twisted-pair, coaxial, or fiber-optic. Hubs are generally used in star topology networks. Token Ring hubs are also known as Multistation

Access Units (MSAUs). A hub works on the physical layer of the OSI model.

Question No: 20

MultipleChoice

Which of the following is NOT the feature of SELinux in the Red Hat enterprise Linux?

Options

ASELinux does not provide Kernel-level security.

BAll process and files have a context.

CSELinux implements Mandatory Access Control (MAC) security in Red Hat Enterprise Linux.

DSELinux applies to all users, including root.

Answer
AExplanation

SELinux is an operating system based on Linux which includes Mandatory Access Control. The SELinux provides Kernel-level security for Red Hat Enterprise Linux.

Answer options C, B, and D are incorrect. These are the features of SELinux.

Limited Time Offer

25%

Off

Get Premium GSEC Questions as Interactive Web-Based Practice Test or PDF