What is the primary security purpose of enabling the macOS Application Firewall?

To encrypt network traffic between the Mac and the internet

To sandbox applications to limit their access to system resources

To prevent malware from running on the system

To block incoming network connections to applications

A macOS user's machine is infected with malware that persists by modifying a LaunchAgent. The malware is not detected by XProtect. Which additional step should be taken to remove the persistence mechanism?

Reset the user's password to prevent unauthorized access.

Disable Gatekeeper to allow security tools to run.

Enable FileVault to encrypt the disk and prevent further infection.

Inspect and remove the malicious LaunchAgent plist from ~/Library/LaunchAgents and terminate the associated process.

What is the primary function of macOS Gatekeeper?

To verify the digital signature of downloaded applications before allowing them to run

To monitor network traffic for malicious activity

To sandbox applications to limit their access to system resources

A Kubernetes cluster has a vulnerability that allows a pod to escape to the host. The security team wants to reduce the impact of a potential breakout. Which configuration is most effective?

Run pods with a read-only root filesystem and drop all capabilities

Use a service account with cluster-admin privileges

Use a hostPath volume to mount the host filesystem

Use a network policy to block all egress traffic

GIAC Security Essentials

Domain 4Objective 1

Container and MacOS Security GSEC Practice Questions (Page 7)

Part of the Endpoint and Platform Security domain, which makes up ~32% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~30–51 in this domain), expect 3–6 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

7concepts

Questions 31–35

31foundation · easy
What is the primary security purpose of enabling the macOS Application Firewall?
Select an answer first
32foundation · easy
Which macOS hardening measure protects data on a lost or stolen device by encrypting the entire startup disk?
Select an answer first
33expert · hard
A macOS user's machine is infected with malware that persists by modifying a LaunchAgent. The malware is not detected by XProtect. Which additional step should be taken to remove the persistence mechanism?
Select an answer first
34foundation · easy
What is the primary function of macOS Gatekeeper?
Select an answer first
35expert · hard
A Kubernetes cluster has a vulnerability that allows a pod to escape to the host. The security team wants to reduce the impact of a potential breakout. Which configuration is most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.