Which characteristic is unique to asymmetric encryption when compared to symmetric encryption?

It does not require any keys to encrypt or decrypt data.

It uses a pair of mathematically related keys: a public key and a private key.

It is always faster than symmetric encryption for large data sets.

It uses a single shared secret key for both encryption and decryption.

What is the core idea behind the defense in depth strategy?

Using a single, strong security control to protect all assets

Focusing only on perimeter security to keep attackers out

Layering multiple security controls so that if one fails, others still provide protection

Deploying the most expensive security products available

A company is designing a new network and wants to implement the principle of least privilege for its employees. Which action best exemplifies this principle?

Grant employees only the permissions required to perform their job functions.

Grant employees access to all systems by default and remove access if a problem occurs.

Grant all employees the same level of access to simplify administration.

Grant employees access based on their seniority.

In the typical cyber attack lifecycle, what is the primary goal of the reconnaissance phase?

To gain initial access to the target system

To maintain persistence in the network

To gather information about the target

To cover tracks and remove evidence

GIAC Foundational Cybersecurity Technologies

Domain 5Objective 1

Security Concepts GFACT Practice Questions (Page 7)

Part of the Security Fundamentals domain, which makes up ~11% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–9 in this domain), expect 6–9 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

6concepts

Questions 31–35

31foundation · easy
Which characteristic is unique to asymmetric encryption when compared to symmetric encryption?
Select an answer first
32application · easy
A system administrator is configuring access controls for a new employee. The employee's role requires access to the customer database and the email system, but not to the financial reporting application. Which principle should guide the administrator's decisions?
Select an answer first
33foundation · easy
What is the core idea behind the defense in depth strategy?
Select an answer first
34application · medium
A company is designing a new network and wants to implement the principle of least privilege for its employees. Which action best exemplifies this principle?
Select an answer first
35foundation · easy
In the typical cyber attack lifecycle, what is the primary goal of the reconnaissance phase?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GFACT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GFACT” is a trademark of its owner, used for identification only.