A user receives an email that appears to be from the company's IT help desk, asking them to verify their password by clicking a link. The user clicks the link and enters their credentials on a page that looks like the company's login portal. Which security control would have been MOST effective in preventing this from succeeding?

A corrective control that resets the password after the incident

Antivirus software on the user's workstation

A firewall blocking outbound web traffic

A company is implementing a security framework and must choose between ISO 27001 and the NIST Cybersecurity Framework (CSF). The company needs to demonstrate compliance with a regulation that requires a formal risk management process, but it also wants a framework that is easy to communicate to executives. Which framework should they choose?

Both are equally suitable for both requirements

Neither, because frameworks are not required for compliance

NIST CSF, because it provides a common language for communicating security posture

ISO 27001, because it is a certifiable standard

A company is evaluating the risk of a cyber attack on its public-facing web server. They estimate that the likelihood of a successful attack is low, but the impact would be high because the server contains sensitive customer data. Which risk management strategy would be most appropriate if the company decides to accept the risk?

Disconnect the server from the internet to eliminate the risk

Document the decision and monitor the risk over time

Implement additional security controls to reduce the risk

Purchase cyber insurance to transfer the risk

A company is concerned about ransomware attacks. They have implemented email filtering to block malicious attachments, but they want to add a control that will help them recover if a workstation is encrypted. Which control would be most effective for this purpose?

Endpoint detection and response (EDR) software

Regularly tested offline backups

GIAC Information Security Fundamentals

Domain 1Objective 1

Foundations of Cybersecurity GISF Practice Questions (Page 2)

Part of the Foundations and Risk Management domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~11–18 in this domain), expect 4–6 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

5concepts

Questions 6–10

6application · medium
An organization has implemented an intrusion detection system (IDS) that monitors network traffic for suspicious patterns and generates alerts. The security team reviews the alerts and then takes action to block the malicious IP addresses. Which combination of control categories does this represent?
Select an answer first
7application · medium
A user receives an email that appears to be from the company's IT help desk, asking them to verify their password by clicking a link. The user clicks the link and enters their credentials on a page that looks like the company's login portal. Which security control would have been MOST effective in preventing this from succeeding?
Select an answer first
8expert · hard
A company is implementing a security framework and must choose between ISO 27001 and the NIST Cybersecurity Framework (CSF). The company needs to demonstrate compliance with a regulation that requires a formal risk management process, but it also wants a framework that is easy to communicate to executives. Which framework should they choose?
Select an answer first
9application · medium
A company is evaluating the risk of a cyber attack on its public-facing web server. They estimate that the likelihood of a successful attack is low, but the impact would be high because the server contains sensitive customer data. Which risk management strategy would be most appropriate if the company decides to accept the risk?
Select an answer first
10expert · hard
A company is concerned about ransomware attacks. They have implemented email filtering to block malicious attachments, but they want to add a control that will help them recover if a workstation is encrypted. Which control would be most effective for this purpose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GISF

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISF” is a trademark of its owner, used for identification only.

Foundations of Cybersecurity GISF Practice Questions (Page 2)

Questions 6–10

A company is concerned about ransomware attacks. They have implemented email filtering to block malicious attachments, but they want to add a control that will help them recover if a workstation is encrypted. Which control would be most effective for this purpose?

Keep studying — Foundations and Risk Management