A company has a bring-your-own-device (BYOD) policy. Employees use personal laptops to access corporate email and applications. The security team is concerned about malware on personal devices and data leakage. Which approach provides the best balance of security and usability?

Require employees to sign an acceptable use policy and trust them to follow it.

Require employees to install mobile device management (MDM) software that enforces encryption, allows remote wipe, and separates corporate data from personal data.

Rely on a web-based email client and do not store data locally on personal devices.

Prohibit BYOD entirely and issue company-owned laptops.

Which of the following is an example of a human factor security control?

A biometric lock on a server room door

A security policy that requires employees to report suspicious emails

An antivirus program that scans for malware

A firewall that blocks malicious traffic

A company recently suffered a ransomware infection that spread from a single workstation to many file servers. The investigation found that the initial infection occurred when a user clicked a malicious link in a phishing email. Which set of controls best addresses the human factor and host layers to prevent a recurrence?

Enable Windows Defender on all workstations and disable USB ports on all endpoints.

Implement a spam filter on the email gateway and block all inbound email attachments.

Require users to change their passwords every 60 days and enforce multi-factor authentication for email access.

Deploy endpoint detection and response (EDR) on all workstations and conduct quarterly security awareness training for all employees.

A small business has a single flat network with all devices, including servers and workstations, on the same subnet. After a malware outbreak, the business wants to limit the spread of future infections and improve monitoring. Which network security approach best achieves this?

Deploy a next-generation firewall at the internet perimeter only.

Enable port security on all switches to limit the number of MAC addresses per port.

Install a network-based intrusion detection system (IDS) on the main switch.

Segment the network into separate VLANs for servers, workstations, and guest devices, and place a firewall between segments.

A company is designing a new office building. The security team wants to implement physical security controls that also support the network security layer. Which control is most effective?

Use a mantrap at the main entrance to control access to the building.

Install CCTV cameras in the lobby and common areas.

Implement a visitor management system that requires all visitors to sign in.

Place network switches and patch panels in locked telecommunication rooms with restricted access.

GIAC Security Essentials

Domain 1Objective 2

Defense in Depth GSEC Practice Questions (Page 3)

Part of the Foundations of Security domain, which makes up ~11% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–18 in this domain), expect 3–6 from this objective — we provide 55 practice questions to prepare you well beyond it. (estimate)

55questions here

11free pages

9concepts

Questions 11–15

11expert · hard
A company has a bring-your-own-device (BYOD) policy. Employees use personal laptops to access corporate email and applications. The security team is concerned about malware on personal devices and data leakage. Which approach provides the best balance of security and usability?
Select an answer first
12foundation · easy
Which of the following is an example of a human factor security control?
Select an answer first
13application · medium
A company recently suffered a ransomware infection that spread from a single workstation to many file servers. The investigation found that the initial infection occurred when a user clicked a malicious link in a phishing email. Which set of controls best addresses the human factor and host layers to prevent a recurrence?
Select an answer first
14application · medium
A small business has a single flat network with all devices, including servers and workstations, on the same subnet. After a malware outbreak, the business wants to limit the spread of future infections and improve monitoring. Which network security approach best achieves this?
Select an answer first
15application · medium
A company is designing a new office building. The security team wants to implement physical security controls that also support the network security layer. Which control is most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.