A company is considering a password manager for its employees. The security team is concerned about the risk of a single master password being compromised. Which additional control is most effective in mitigating this risk?

Require MFA on the password manager account

Store the master password in a shared spreadsheet for backup

Use a password manager that stores the master password in the cloud

Require employees to change their master password every 30 days

A company is implementing a new HR system and wants to automate user provisioning. The system must ensure that when an employee leaves, their access is revoked promptly. Which approach is most effective?

Set all accounts to expire after 90 days and require re-certification

Require managers to submit a ticket to IT to disable accounts

Integrate the HR system with the identity management platform to automatically disable accounts upon termination

Disable accounts only after the employee's final paycheck is issued

In an access control matrix, what does the intersection of a subject row and an object column typically contain?

The permissions the subject has on that object

The security label of the object

GIAC Security Essentials

Domain 1Objective 1

Access Control & Password Management GSEC Practice Questions (Page 7)

Part of the Foundations of Security domain, which makes up ~11% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–18 in this domain), expect 3–6 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

7concepts

Questions 31–35

31expert · medium
A company is evaluating password managers for enterprise use. They need to ensure that the master password is not known to the vendor. Which feature is essential?
Select an answer first
32expert · hard
A company is considering a password manager for its employees. The security team is concerned about the risk of a single master password being compromised. Which additional control is most effective in mitigating this risk?
Select an answer first
33expert · hard
A company is implementing a new HR system and wants to automate user provisioning. The system must ensure that when an employee leaves, their access is revoked promptly. Which approach is most effective?
Select an answer first
34foundation · easy
In an access control matrix, what does the intersection of a subject row and an object column typically contain?
Select an answer first
35foundation · easy
Which component of a strong password policy is specifically intended to increase the password's resistance to brute-force attacks by expanding the number of possible combinations?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Access Control & Password Management GSEC Practice Questions (Page 7)

Questions 31–35

A company is evaluating password managers for enterprise use. They need to ensure that the master password is not known to the vendor. Which feature is essential?

A company is considering a password manager for its employees. The security team is concerned about the risk of a single master password being compromised. Which additional control is most effective in mitigating this risk?

A company is implementing a new HR system and wants to automate user provisioning. The system must ensure that when an employee leaves, their access is revoked promptly. Which approach is most effective?

In an access control matrix, what does the intersection of a subject row and an object column typically contain?

Which component of a strong password policy is specifically intended to increase the password's resistance to brute-force attacks by expanding the number of possible combinations?

Keep studying — Foundations of Security