GIAC Information Security Fundamentals
Domain 3Objective 2
Intrusion and Initial Access Techniques GISF Practice Questions (Page 8)
Part of the Threats and Defenses domain, which makes up ~36% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~18–29 in this domain), expect 5–7 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)
45questions here
9free pages
9concepts
Questions 36–40
- 36
Which of the following is a common initial access vector used by attackers to gain a foothold in an organization's network?
Select an answer first - 37
In the intrusion lifecycle, which phase typically follows the initial compromise and is focused on establishing a persistent foothold within the target environment?
Select an answer first - 38
A company's web application is running an outdated library with a known SQL injection vulnerability. An attacker exploits this to extract user credentials from the database. What is the most effective preventive measure to stop this type of initial access?
Select an answer first - 39
Why are weak passwords considered a significant risk for initial access?
Select an answer first - 40
A security analyst is reviewing an intrusion. The attacker initially gained access via a phishing email, then installed a backdoor, escalated privileges, and moved laterally to a database server. The analyst needs to identify the earliest point where the intrusion could have been detected and stopped. Which phase of the intrusion lifecycle is the most critical for detection?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISF” is a trademark of its owner, used for identification only.