Which practice is recommended for storing administrative credentials?

Store them in a plain text file on the admin's desktop.

Share credentials via email for team collaboration.

Use a dedicated privileged access management (PAM) solution.

Write them down and keep them in a desk drawer.

Which of the following is an example of a multi-factor authentication factor?

A one-time passcode generated by an authenticator app

Which of the following is a key component of an effective audit trail for admin activity?

Logs that are automatically deleted after 24 hours.

Logs that are only accessible to the administrator being audited.

Timestamped logs that record who did what and when.

Logs that contain only successful actions.

What is the primary benefit of enforcing multi-factor authentication (MFA) for administrative accounts?

It eliminates the need for strong password policies.

It adds an additional layer of security beyond just a password.

It allows administrators to bypass security policies.

It automatically rotates passwords for all users.

A security team needs to grant a senior engineer temporary access to a domain controller to apply a critical patch. The engineer should only have the ability to run the patch installer and view relevant logs, and the access must expire automatically after 4 hours. Which approach best meets these requirements?

Use a Privileged Access Management (PAM) solution to issue a time-limited, just-enough-admin role that allows only the patch installer and log viewing, with automatic expiration.

Create a dedicated service account with local admin rights on the DC and share the password with the engineer for the task.

Grant the engineer interactive logon rights to the DC and rely on the patch installer to request elevation via UAC.

Add the engineer to the Domain Admins group for 4 hours, then remove them manually.

GIAC Defending Advanced Threats

Domain 3Objective 1

Administrative Access GDAT Practice Questions (Page 4)

Part of the Credential and Privilege Management domain, which makes up ~10% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 5–8 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

7concepts

Questions 16–20

16foundation · easy
Which practice is recommended for storing administrative credentials?
Select an answer first
17foundation · easy
Which of the following is an example of a multi-factor authentication factor?
Select an answer first
18foundation · easy
Which of the following is a key component of an effective audit trail for admin activity?
Select an answer first
19foundation · easy
What is the primary benefit of enforcing multi-factor authentication (MFA) for administrative accounts?
Select an answer first
20application · medium
A security team needs to grant a senior engineer temporary access to a domain controller to apply a critical patch. The engineer should only have the ability to run the patch installer and view relevant logs, and the access must expire automatically after 4 hours. Which approach best meets these requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GDAT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDAT” is a trademark of its owner, used for identification only.