A hospital is implementing an IAM system for its staff. The requirement is that a nurse should only have access to patient records for patients currently under their care, and this access should be automatically removed when the patient is discharged. Which IAM concept should be implemented?

Mandatory access control (MAC) with fixed labels

Discretionary access control (DAC) where the nurse sets permissions

Role-based access control (RBAC) with static roles

Dynamic access control based on attributes and context

A multinational company is implementing an IAM system. They need to ensure that a user's access rights are automatically adjusted when they change roles within the company. Which IAM process is most directly relevant?

Single sign-on (SSO) across all applications

Multi-factor authentication (MFA) for all users

Identity lifecycle management with automated provisioning and deprovisioning

Periodic access reviews by managers

A data center is being designed. The security team wants to ensure that only authorized personnel can physically access the server racks, and that this physical access is logged and tied to the individual. Which combination of physical controls should be implemented?

A security guard at the front entrance only

A single locked door with a shared key

A cipher lock with a common code

Biometric scanner and a mantrap with video surveillance

A security architect is designing a system that processes credit card payments. The system must comply with PCI DSS and protect cardholder data. The architect must balance security with usability for customers. Which approach best meets these requirements?

Store cardholder data in plaintext to speed up processing

Use a single firewall and no encryption

Rely on the payment processor to handle all security

Encrypt cardholder data at rest and in transit, and segment the payment system from the rest of the network

GIAC Information Security Professional

Domain 2Objective 1

Security Architecture and Engineering GISP Practice Questions (Page 6)

Part of the Security Architecture and Operations domain, which makes up ~43% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~41–69 in this domain), expect 14–23 from this objective — we provide 65 practice questions to prepare you well beyond it. (estimate)

65questions here

13free pages

12concepts

Questions 26–30

26application · medium
A hospital is implementing an IAM system for its staff. The requirement is that a nurse should only have access to patient records for patients currently under their care, and this access should be automatically removed when the patient is discharged. Which IAM concept should be implemented?
Select an answer first
27expert · hard
A multinational company is implementing an IAM system. They need to ensure that a user's access rights are automatically adjusted when they change roles within the company. Which IAM process is most directly relevant?
Select an answer first
28application · medium
A data center is being designed. The security team wants to ensure that only authorized personnel can physically access the server racks, and that this physical access is logged and tied to the individual. Which combination of physical controls should be implemented?
Select an answer first
29expert · hard
A security architect is designing a system that processes credit card payments. The system must comply with PCI DSS and protect cardholder data. The architect must balance security with usability for customers. Which approach best meets these requirements?
Select an answer first
30foundation · easy
An integrity-focused security model that prevents subjects from writing to objects at a higher integrity level is known as:
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GISP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISP” is a trademark of its owner, used for identification only.