A manufacturing company is configuring new Windows 10 workstations for the production floor. The workstations will be used by operators who need to run a specific production application. What is the most secure way to configure user accounts?

Create a shared user account for all operators to simplify management.

Create a standard user account for each operator and use a separate admin account for installations.

Add all operators to the local Administrators group so they can install software.

Use the built-in Administrator account for all operators.

A water utility has a remote operator workstation that is accessed by multiple shift operators. The workstation is in a remote pumping station with limited network connectivity. The security team wants to enforce least privilege and maintain accountability. Which approach is most practical?

Use a biometric fingerprint reader on the workstation and store the log locally.

Implement a RADIUS-based authentication system that requires each operator to use a unique username and password, and log all access to a central server.

Use a shared local account with a complex password and change it monthly.

Disable all authentication and rely on the physical security of the remote station.

What is the purpose of endpoint lifecycle management?

To track only the financial cost of endpoints

To maximize the performance of endpoints by overclocking hardware

To manage endpoints from provisioning through decommissioning to ensure security is maintained at every stage

To ensure endpoints are replaced every year with the latest models

A data center hosting industrial control system servers has a raised floor with cooling vents. A visitor is seen entering the server room without an escort. What is the most effective immediate response?

Escort the visitor to a secure area and verify their identity and authorization.

Call law enforcement immediately.

Ignore the visitor if they appear to be an employee.

Politely ask the visitor to leave and report the incident to security.

Which of the following is a core principle of endpoint hardening?

Disable all services and ports that are not required for the endpoint's function

Use the same configuration for all endpoints to simplify management

Allow all network traffic to and from the endpoint to avoid disrupting operations

Grant all users administrative privileges to ensure smooth operation

GIAC Global Industrial Cyber Security Professional

Domain 3Objective 1

Hardening & Protecting Endpoints GICSP Practice Questions (Page 5)

Part of the Security Management and Response domain, which makes up ~33% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~23–40 in this domain), expect 8–13 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

8concepts

Questions 21–25

21application · medium
A manufacturing company is configuring new Windows 10 workstations for the production floor. The workstations will be used by operators who need to run a specific production application. What is the most secure way to configure user accounts?
Select an answer first
22expert · hard
A water utility has a remote operator workstation that is accessed by multiple shift operators. The workstation is in a remote pumping station with limited network connectivity. The security team wants to enforce least privilege and maintain accountability. Which approach is most practical?
Select an answer first
23foundation · easy
What is the purpose of endpoint lifecycle management?
Select an answer first
24application · medium
A data center hosting industrial control system servers has a raised floor with cooling vents. A visitor is seen entering the server room without an escort. What is the most effective immediate response?
Select an answer first
25foundation · easy
Which of the following is a core principle of endpoint hardening?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GICSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GICSP” is a trademark of its owner, used for identification only.