A security scan on a CentOS 9 server flags that the installed version of the 'openssl' package is vulnerable. The server is registered to a local repository that mirrors the official CentOS repositories. Which command sequence will update the package to the latest available patched version?

apt-get install --only-upgrade openssl

What is the first stage of the Linux boot process after the system firmware (BIOS/UEFI) hands off control?

The bootloader (e.g., GRUB) loads the kernel

The kernel mounts the root file system

The init system (systemd) starts services

A security team is hardening a Linux server. They need to ensure that the SSH service is running, but they also want to prevent any user from logging in as root via SSH. Which configuration change meets both requirements?

Disable the sshd service with systemctl disable sshd

Set AllowUsers root in /etc/ssh/sshd_config

Set PermitRootLogin no in /etc/ssh/sshd_config and restart sshd

A directory has the sticky bit set. What effect does this have on file deletion within that directory?

Only the file owner, directory owner, or root can delete files.

Any user with write permission on the directory can delete any file.

Files cannot be deleted at all.

GIAC Security Essentials

Domain 4Objective 3

Linux Fundamentals GSEC Practice Questions (Page 7)

Part of the Endpoint and Platform Security domain, which makes up ~32% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~30–51 in this domain), expect 3–6 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

10concepts

Questions 31–35

31application · medium
A security scan on a CentOS 9 server flags that the installed version of the 'openssl' package is vulnerable. The server is registered to a local repository that mirrors the official CentOS repositories. Which command sequence will update the package to the latest available patched version?
Select an answer first
32foundation · easy
What is the first stage of the Linux boot process after the system firmware (BIOS/UEFI) hands off control?
Select an answer first
33expert · medium
A security team is hardening a Linux server. They need to ensure that the SSH service is running, but they also want to prevent any user from logging in as root via SSH. Which configuration change meets both requirements?
Select an answer first
34foundation · easy
A directory has the sticky bit set. What effect does this have on file deletion within that directory?
Select an answer first
35application · medium
An administrator needs to temporarily lock the account of an employee who is on leave, but keep the home directory and all files intact. The account is 'jsmith'. Which command accomplishes this without deleting the account?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.