A company is implementing a security policy that requires all employees to use strong passwords and MFA. The company also wants to implement a control that limits the damage if an employee's account is compromised. Which control best complements the authentication requirements to limit damage?

Implement a firewall to block external access.

Implement encryption for all data at rest.

Implement least privilege by granting employees only the permissions necessary for their roles.

Implement a password manager to store all passwords.

An organization needs to encrypt data at rest on a file server. The data is accessed by multiple internal applications and users. The primary concern is performance and ease of key management. Which encryption approach is most appropriate?

Use a digital signature for each file.

Use asymmetric encryption with each user's public key.

Use symmetric encryption with a single key managed by a central key management system.

Use hashing to protect the data.

A small business wants to protect its internal network from external threats. They have a limited budget and no dedicated security staff. Which combination of controls provides the most effective defense in depth?

Antivirus software on all endpoints and a VPN for remote access.

Regular security awareness training and a strong password policy.

A firewall, antivirus software on all endpoints, and regular security awareness training for employees.

A firewall and a strong password policy.

A company needs to encrypt data stored on a laptop that is used by a single employee. The employee is the only person who needs to access the data. The company wants to minimize key management complexity while ensuring that the data is protected if the laptop is stolen. Which encryption approach is most appropriate?

Use full-disk encryption with a symmetric key derived from the user's password.

Use a digital signature to protect the data.

Use asymmetric encryption and encrypt the data with the employee's public key.

Use a hash of the data to protect it.

What is the principle of least privilege?

Giving users the minimum level of access necessary to perform their job functions

Granting all users the same level of access to simplify management

Providing administrators with full access to all systems at all times

Removing all access controls to increase productivity

GIAC Foundational Cybersecurity Technologies

Domain 5Objective 1

Security Concepts GFACT Practice Questions (Page 2)

Part of the Security Fundamentals domain, which makes up ~11% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–9 in this domain), expect 6–9 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

6concepts

Questions 6–10

6expert · hard
A company is implementing a security policy that requires all employees to use strong passwords and MFA. The company also wants to implement a control that limits the damage if an employee's account is compromised. Which control best complements the authentication requirements to limit damage?
Select an answer first
7application · medium
An organization needs to encrypt data at rest on a file server. The data is accessed by multiple internal applications and users. The primary concern is performance and ease of key management. Which encryption approach is most appropriate?
Select an answer first
8application · medium
A small business wants to protect its internal network from external threats. They have a limited budget and no dedicated security staff. Which combination of controls provides the most effective defense in depth?
Select an answer first
9application · medium
A company needs to encrypt data stored on a laptop that is used by a single employee. The employee is the only person who needs to access the data. The company wants to minimize key management complexity while ensuring that the data is protected if the laptop is stolen. Which encryption approach is most appropriate?
Select an answer first
10foundation · easy
What is the principle of least privilege?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GFACT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GFACT” is a trademark of its owner, used for identification only.