GIAC Information Security Fundamentals
Domain 3Objective 1
Adversary Analysis and Threat Frameworks GISF Practice Questions (Page 8)
Part of the Threats and Defenses domain, which makes up ~36% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~18–29 in this domain), expect 5–7 from this objective — we provide 55 practice questions to prepare you well beyond it. (estimate)
55questions here
11free pages
10concepts
Questions 36–40
- 36
What is the correct order of the threat intelligence lifecycle?
Select an answer first - 37
A company has identified that its main attack vector is phishing emails that deliver malware. The security team wants to implement a defensive countermeasure that will have the most immediate impact on reducing this risk. Which control should they implement first?
Select an answer first - 38
A threat intelligence analyst has finished analyzing a new malware campaign and has produced a report with recommended detection rules. What is the next step in the threat intelligence lifecycle?
Select an answer first - 39
Which framework describes the stages of an attack from reconnaissance to actions on objectives?
Select an answer first - 40
A security team has analyzed a recent campaign where the adversary uses USB drives dropped in parking lots to deliver malware, then establishes persistence via scheduled tasks, and finally uses legitimate cloud storage for exfiltration. Based on this TTP analysis, which defensive control would be most effective at the initial access stage?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISF” is a trademark of its owner, used for identification only.