What is the primary purpose of data loss prevention (DLP) systems?

To manage user access permissions to files

To encrypt all data stored in databases

To provide backup and recovery for critical data

To detect and block unauthorized attempts to transmit sensitive data

A company is experiencing frequent malware infections on employee workstations despite having antivirus software installed. The infections often start when employees install unauthorized software. The security team wants to reduce the risk. Which combination of controls is most effective?

Implement application allowlisting to prevent unauthorized software from running, and enforce a policy requiring IT approval for software installations.

Disable local administrator rights on all workstations.

Increase the frequency of antivirus signature updates and run weekly scans.

Provide security awareness training on the dangers of unauthorized software.

Which of the following is a host-based security control?

An intrusion detection system that monitors network traffic

A firewall that filters traffic between network segments

A security information and event management (SIEM) system that aggregates logs from multiple sources

A host-based intrusion detection system (HIDS) that monitors system logs

A company is designing a new server room. The room will contain servers that store sensitive data. The security team must protect the servers from both physical theft and remote cyberattacks. Which combination of controls is most comprehensive?

Encrypt all data on the servers and use strong passwords.

Place the servers in a locked room and rely on the building's security guard.

Deploy a network firewall and an intrusion prevention system (IPS) at the network perimeter.

Use a locked server rack with individual locks, install motion sensors and CCTV, and deploy host-based firewalls and intrusion detection on each server.

GIAC Security Essentials

Domain 1Objective 2

Defense in Depth GSEC Practice Questions (Page 8)

Part of the Foundations of Security domain, which makes up ~11% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–18 in this domain), expect 3–6 from this objective — we provide 55 practice questions to prepare you well beyond it. (estimate)

55questions here

11free pages

9concepts

Questions 36–40

36foundation · easy
A security team installs a motion sensor that triggers an alarm when an intruder enters a restricted area. Which type of security control does this represent?
Select an answer first
37foundation · easy
What is the primary purpose of data loss prevention (DLP) systems?
Select an answer first
38expert · hard
A company is experiencing frequent malware infections on employee workstations despite having antivirus software installed. The infections often start when employees install unauthorized software. The security team wants to reduce the risk. Which combination of controls is most effective?
Select an answer first
39foundation · easy
Which of the following is a host-based security control?
Select an answer first
40expert · hard
A company is designing a new server room. The room will contain servers that store sensitive data. The security team must protect the servers from both physical theft and remote cyberattacks. Which combination of controls is most comprehensive?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.