A macOS machine is infected with adware that keeps reinstalling itself after removal. The adware uses a LaunchDaemon to persist. Which step is essential to prevent reinstallation?

Run a malware scanner that only quarantines the adware binary.

Disable the application firewall to allow security tools to update.

Remove the LaunchDaemon plist from /Library/LaunchDaemons and reboot the machine.

Change the user's password to prevent unauthorized changes.

In container security, what is the primary purpose of Linux namespaces?

To limit the CPU and memory usage of a container

To authenticate users before they can run containers

To isolate a container's view of system resources such as processes, network, and filesystem

To encrypt the container's filesystem at rest

GIAC Security Essentials

Domain 4Objective 1

Container and MacOS Security GSEC Practice Questions (Page 9)

Part of the Endpoint and Platform Security domain, which makes up ~32% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~30–51 in this domain), expect 3–6 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

7concepts

Questions 41–43

41expert · hard
A macOS machine is infected with adware that keeps reinstalling itself after removal. The adware uses a LaunchDaemon to persist. Which step is essential to prevent reinstallation?
Select an answer first
42foundation · easy
Which macOS built-in technology provides signature-based detection of known malware?
Select an answer first
43foundation · easy
In container security, what is the primary purpose of Linux namespaces?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Container and MacOS Security GSEC Practice Questions (Page 9)

Questions 41–43

A macOS machine is infected with adware that keeps reinstalling itself after removal. The adware uses a LaunchDaemon to persist. Which step is essential to prevent reinstallation?

Which macOS built-in technology provides signature-based detection of known malware?

In container security, what is the primary purpose of Linux namespaces?

Keep studying — Endpoint and Platform Security