A company has experienced a data breach where an attacker exfiltrated data from an internal server. The security team wants to detect similar attacks in the future and respond quickly. Which combination of controls should they implement?

Rely on the antivirus software on the server

Disable all external access to the server

Increase the firewall rule set to block all outbound traffic

Deploy a network intrusion detection system (IDS) and enable detailed logging on critical servers

A company is implementing an IAM solution. They want to ensure that when an employee leaves the company, their access is revoked promptly and that no shared accounts are used. Which combination of IAM lifecycle practices best achieves this?

Automate account deprovisioning upon HR termination and enforce unique accounts for each user

Change the employee's password and keep the account active

Manually disable accounts at the end of the month

Allow shared accounts for convenience and rely on audit logs

A company is implementing a secure file transfer system. They need to ensure that files are encrypted in transit and that the receiving party can verify the sender's identity. Which combination of cryptographic techniques should be used?

Use TLS with client certificates

Use the recipient's public key to encrypt the file and a hash for integrity

Use a shared symmetric key for encryption and a MAC for integrity

Use the sender's private key to encrypt the entire file

A company is deploying a new web application that processes customer orders. The application will be placed in a DMZ, with a database in an internal zone. The security architect wants to ensure that even if the web server is compromised, the attacker cannot directly access the database. Which design principle is most directly applied?

Defense in depth with multiple layers of controls

Separation of duties by assigning different administrators

Least privilege by restricting network paths and permissions

Secure defaults by disabling unnecessary services

In secure system design, what is the primary purpose of a trust boundary?

To define the physical location of servers

To separate components with different trust levels

To simplify user authentication

GIAC Information Security Professional

Domain 2Objective 1

Security Architecture and Engineering GISP Practice Questions (Page 12)

Part of the Security Architecture and Operations domain, which makes up ~43% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~41–69 in this domain), expect 14–23 from this objective — we provide 65 practice questions to prepare you well beyond it. (estimate)

65questions here

13free pages

12concepts

Questions 56–60

56application · medium
A company has experienced a data breach where an attacker exfiltrated data from an internal server. The security team wants to detect similar attacks in the future and respond quickly. Which combination of controls should they implement?
Select an answer first
57application · medium
A company is implementing an IAM solution. They want to ensure that when an employee leaves the company, their access is revoked promptly and that no shared accounts are used. Which combination of IAM lifecycle practices best achieves this?
Select an answer first
58expert · hard
A company is implementing a secure file transfer system. They need to ensure that files are encrypted in transit and that the receiving party can verify the sender's identity. Which combination of cryptographic techniques should be used?
Select an answer first
59application · medium
A company is deploying a new web application that processes customer orders. The application will be placed in a DMZ, with a database in an internal zone. The security architect wants to ensure that even if the web server is compromised, the attacker cannot directly access the database. Which design principle is most directly applied?
Select an answer first
60foundation · easy
In secure system design, what is the primary purpose of a trust boundary?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GISP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISP” is a trademark of its owner, used for identification only.