GIAC Information Security Professional
Domain 2Objective 1
Security Architecture and Engineering GISP Practice Questions (Page 9)
Part of the Security Architecture and Operations domain, which makes up ~43% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~41–69 in this domain), expect 14–23 from this objective — we provide 65 practice questions to prepare you well beyond it. (estimate)
65questions here
13free pages
12concepts
Questions 41–45
- 41
In a security architecture, a user is granted only the permissions required to perform their job functions. Which security principle does this describe?
Select an answer first - 42
Which cryptographic technique is used to verify the integrity of data by producing a fixed-size output that changes if the data is altered?
Select an answer first - 43
Which IAM process verifies a user's identity before granting access?
Select an answer first - 44
A government agency is procuring a new authentication system. They require a high level of assurance that the system meets specified security requirements. They are considering both Common Criteria evaluation and FIPS 140-2 validation. Which statement best describes the appropriate use of these evaluations?
Select an answer first - 45
Which physical security control is used to restrict entry to a data center to authorized personnel only?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISP” is a trademark of its owner, used for identification only.