A security team needs to protect sensitive files stored on a laptop that may be stolen. They want to ensure that the files remain confidential even if the attacker gains physical access to the disk. Which solution is most appropriate?

Using a digital signature to sign each file.

Encrypting only the filenames with a symmetric key.

Full-disk encryption using AES-256 with a strong passphrase.

Hashing each file and storing the hashes on the same disk.

Which of the following is a common use of a cryptographic hash function?

Encrypting data for confidentiality

Authenticating users with passwords stored in plaintext

Which of the following is a common application of cryptography for protecting data at rest?

Using IPsec for VPN connections

Using TLS to encrypt web traffic

Using full-disk encryption on a laptop

Using SSH for remote administration

A software vendor distributes updates, and customers verify the updates using the vendor's public key. The vendor wants to ensure that even if one of its code-signing keys is compromised, previously signed updates remain verifiable and the impact is limited. Which approach should the vendor adopt?

Use a short-lived code-signing certificate and timestamp each signature so that signatures remain valid even after the certificate expires or is revoked.

Avoid using certificates and instead publish the public key on the vendor's website.

Use a symmetric key for signing and distribute it to all customers.

Use a single long-lived code-signing key and rely on the CA to revoke it if compromised.

GIAC Security Essentials

Domain 3Objective 2

Cryptography Application GSEC Practice Questions (Page 4)

Part of the Cryptography and Communications domain, which makes up ~12% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~11–19 in this domain), expect 4–6 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

8concepts

Questions 16–20

16foundation · easy
Which of the following is a well-known symmetric encryption algorithm?
Select an answer first
17application · medium
A security team needs to protect sensitive files stored on a laptop that may be stolen. They want to ensure that the files remain confidential even if the attacker gains physical access to the disk. Which solution is most appropriate?
Select an answer first
18foundation · easy
Which of the following is a common use of a cryptographic hash function?
Select an answer first
19foundation · easy
Which of the following is a common application of cryptography for protecting data at rest?
Select an answer first
20expert · hard
A software vendor distributes updates, and customers verify the updates using the vendor's public key. The vendor wants to ensure that even if one of its code-signing keys is compromised, previously signed updates remain verifiable and the impact is limited. Which approach should the vendor adopt?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.