In Identity and Access Management (IAM), what does 'identity lifecycle management' primarily involve?

Managing the creation, modification, and deletion of user accounts

A company has experienced a data breach. The security team needs to implement controls to prevent similar incidents and also to detect future attempts. Which combination of controls is most appropriate?

Implement a firewall and an IDS

Implement a honeypot and a firewall

What is the primary purpose of a digital signature?

To generate a shared secret key

To provide non-repudiation and integrity

A development team is writing a web application that accepts user input in a search field. They want to prevent SQL injection attacks. Which secure coding practice should they use?

Encode all user input with HTML encoding

Use parameterized queries or prepared statements

Disable error messages on the production server

Use a web application firewall (WAF) as the primary defense

GIAC Information Security Professional

Domain 2Objective 1

Security Architecture and Engineering GISP Practice Questions (Page 8)

Part of the Security Architecture and Operations domain, which makes up ~43% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~41–69 in this domain), expect 14–23 from this objective — we provide 65 practice questions to prepare you well beyond it. (estimate)

65questions here

13free pages

12concepts

Questions 36–40

36foundation · easy
In Identity and Access Management (IAM), what does 'identity lifecycle management' primarily involve?
Select an answer first
37expert · hard
A company has experienced a data breach. The security team needs to implement controls to prevent similar incidents and also to detect future attempts. Which combination of controls is most appropriate?
Select an answer first
38foundation · easy
A security architect is designing a multi-layered defense for a web application. Which principle is being applied when the architect places a firewall, an intrusion prevention system, and a web application firewall in series?
Select an answer first
39foundation · easy
What is the primary purpose of a digital signature?
Select an answer first
40application · medium
A development team is writing a web application that accepts user input in a search field. They want to prevent SQL injection attacks. Which secure coding practice should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GISP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISP” is a trademark of its owner, used for identification only.