Defense in Depth GSEC Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company has a strong technical security posture, but a recent social engineering attack succeeded because an employee shared their password over the phone. The security team wants to implement a control that would have prevented this specific incident. Which control is the most effective?

   • AConduct a security awareness training session on social engineering.
   • BImplement multi-factor authentication (MFA) for all user accounts.
   • CDeploy a data loss prevention (DLP) solution to monitor outbound communications for passwords.
   • DEnforce a policy that requires passwords to be changed every 30 days.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A development team is deploying a web application that accepts user-uploaded files. The security team wants to prevent malicious files from being executed on the server. Which combination of application and host controls is most appropriate?

   • AValidate file types and store uploads in a directory with execute permissions disabled.
   • BRun the web server as an unprivileged user and rely on the operating system's file permissions.
   • CUse a web application firewall to block requests with suspicious file extensions.
   • DEncrypt the upload directory and require multi-factor authentication for the web application.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   After a malware infection is discovered on a workstation, the IT team restores the system from a clean backup. Which type of security control is this?

   • ACompensating
   • BPreventive
   • CDetective
   • DCorrective
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   When designing a defense-in-depth architecture for a web application, which set of controls would be most appropriate?

   • ASecure coding practices only
   • BDatabase encryption only
   • CA firewall only
   • DA firewall, a web application firewall, secure coding practices, and database encryption
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company has experienced several incidents where employees plugged unauthorized USB drives into their workstations, leading to malware infections. The security team wants to reduce this risk without completely banning USB devices, because some employees need them for legitimate work. Which approach best balances security and usability?

   • ADisable all USB ports on every workstation via Group Policy.
   • BUse endpoint management software to block unauthorized USB devices while allowing approved devices through a whitelist.
   • CConduct a security awareness training session on the dangers of USB devices.
   • DDeploy a network-based intrusion detection system to monitor for malware traffic.
   Reveal Solution Discussion Select an answer first