What is the primary purpose of a Security Identifier (SID) in Windows?

To track failed login attempts.

To uniquely identify a user, group, or computer account in a Windows domain or local system.

To store the permissions for a file or folder.

To encrypt data on the hard drive.

An administrator is reviewing the DACL of a folder and sees the following ACE: 'Allow - Domain Users - Modify'. What does the 'Modify' portion of this ACE represent?

The ACE flags, which control inheritance

The access mask, which specifies the rights being granted

Which of the following best describes the relationship between subjects and objects in the Windows access control model?

Subjects are security descriptors and objects are access tokens.

Subjects are users or processes, and objects are resources like files and registry keys that subjects access.

Subjects and objects are both identified by access control entries.

Subjects are files and objects are users who access them.

A security analyst is reviewing access control settings and sees a SID 'S-1-5-18' in an object's DACL. What does this SID represent?

The built-in Administrators group

What special rights does the owner of an object have in Windows?

The owner can change the object's encryption key.

The owner can always change the DACL, regardless of the current permissions.

The owner has full control over the object at all times.

The owner can bypass the SACL and disable auditing.

GIAC Security Essentials

Domain 4Objective 5

Windows Access Controls GSEC Practice Questions (Page 3)

Part of the Endpoint and Platform Security domain, which makes up ~32% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~30–51 in this domain), expect 3–6 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

13concepts

13 Concepts in This Objective

Windows Access Control Model
Security Identifiers (SIDs)
Access Tokens
Security Descriptors
Discretionary Access Control Lists (DACLs)
Access Control Entries (ACEs)
Access Check Algorithm
Inheritance of Permissions
Effective Permissions
Ownership and Take Ownership
Privileges and User Rights
Auditing and SACLs
Access Control Tools

Questions 11–15

11foundation · easy
What is the primary purpose of a Security Identifier (SID) in Windows?
Select an answer first
12application · easy
An administrator is reviewing the DACL of a folder and sees the following ACE: 'Allow - Domain Users - Modify'. What does the 'Modify' portion of this ACE represent?
Select an answer first
13foundation · easy
Which of the following best describes the relationship between subjects and objects in the Windows access control model?
Select an answer first
14application · easy
A security analyst is reviewing access control settings and sees a SID 'S-1-5-18' in an object's DACL. What does this SID represent?
Select an answer first
15foundation · easy
What special rights does the owner of an object have in Windows?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.