An organization wants to prevent malware infections from USB drives, but some employees legitimately need to use USB drives for work. Which control balances security and usability?

Use endpoint security software that scans USB drives for malware

Allow only USB drives from a specific vendor

What is a common technique used in removable media attacks to trick users into inserting a malicious USB drive?

Leaving the drive in a public location with a label like 'Confidential'

Using a USB drive that is encrypted with a strong password

Creating a USB drive that looks like a candy bar

Sending an email with the USB drive as an attachment

How do attackers commonly use stolen credentials to gain initial access to a network?

By exploiting a buffer overflow in the authentication system

By using the credentials to log in to a legitimate service, such as VPN or email

By sending a phishing email to the user whose credentials were stolen

By installing a keylogger on the user's device

An attacker exploits a known vulnerability in an internet-facing web server to gain a foothold. Which initial access vector does this represent?

Exploitation of vulnerabilities

An organization has a strong email security gateway that blocks most phishing emails. However, an attacker successfully gains access by calling the help desk and convincing a technician to reset a password. The attacker then uses the new password to log in. Which combination of techniques did the attacker use?

Social engineering and credential-based access

Removable media and social engineering

Supply chain and credential theft

GIAC Information Security Fundamentals

Domain 3Objective 2

Intrusion and Initial Access Techniques GISF Practice Questions (Page 3)

Part of the Threats and Defenses domain, which makes up ~36% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~18–29 in this domain), expect 5–7 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

9concepts

Questions 11–15

11expert · hard
An organization wants to prevent malware infections from USB drives, but some employees legitimately need to use USB drives for work. Which control balances security and usability?
Select an answer first
12foundation · easy
What is a common technique used in removable media attacks to trick users into inserting a malicious USB drive?
Select an answer first
13foundation · easy
How do attackers commonly use stolen credentials to gain initial access to a network?
Select an answer first
14foundation · easy
An attacker exploits a known vulnerability in an internet-facing web server to gain a foothold. Which initial access vector does this represent?
Select an answer first
15expert · hard
An organization has a strong email security gateway that blocks most phishing emails. However, an attacker successfully gains access by calling the help desk and convincing a technician to reset a password. The attacker then uses the new password to log in. Which combination of techniques did the attacker use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GISF

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISF” is a trademark of its owner, used for identification only.