A manufacturing plant has a shared engineering workstation used by multiple technicians. The technicians need to run a specific configuration tool that requires local admin rights. What is the best way to provide least-privilege access while allowing the tool to run?

Disable UAC on the workstation to allow the tool to run without prompts.

Install the tool on each technician's personal laptop instead.

Use a dedicated service account with admin rights and have technicians use 'Run As' with that account.

Add all technicians to the local Administrators group.

A wastewater treatment plant has a legacy SCADA server running Windows Server 2008. The server cannot be patched because the vendor has not validated the patches. What is the best compensating control to protect the server?

Disable the server's network interface to prevent all remote attacks.

Enable automatic updates from Windows Update.

Install a next-generation antivirus that uses behavior analysis.

Place the server on a separate network segment with strict firewall rules.

A natural gas pipeline company has a fleet of identical Windows 10 workstations used for pipeline monitoring. The security team wants to ensure all workstations have the same secure configuration. Which approach is most efficient and effective?

Manually configure each workstation using a checklist.

Use a Group Policy Object (GPO) to apply a security baseline to all workstations in the domain.

Create a custom script that runs once on each workstation and then delete it.

Install a security agent on each workstation that reports configuration drift.

GIAC Global Industrial Cyber Security Professional

Domain 3Objective 1

Hardening & Protecting Endpoints GICSP Practice Questions (Page 10)

Part of the Security Management and Response domain, which makes up ~33% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~23–40 in this domain), expect 8–13 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

8concepts

Questions 46–48

46application · medium
A manufacturing plant has a shared engineering workstation used by multiple technicians. The technicians need to run a specific configuration tool that requires local admin rights. What is the best way to provide least-privilege access while allowing the tool to run?
Select an answer first
47application · medium
A wastewater treatment plant has a legacy SCADA server running Windows Server 2008. The server cannot be patched because the vendor has not validated the patches. What is the best compensating control to protect the server?
Select an answer first
48application · medium
A natural gas pipeline company has a fleet of identical Windows 10 workstations used for pipeline monitoring. The security team wants to ensure all workstations have the same secure configuration. Which approach is most efficient and effective?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GICSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GICSP” is a trademark of its owner, used for identification only.