Windows Security Infrastructure GSEC Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which hardening practice reduces the attack surface of a Windows server by removing unnecessary components?

   • AIncreasing the number of administrator accounts
   • BEnabling all Windows features
   • CDisabling unnecessary services and features
   • DUsing default security settings
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which Windows technology is used to protect sensitive data such as passwords and encryption keys at the application level, automatically encrypting data for the current user?

   • ACredential Guard
   • BDPAPI
   • CBitLocker
   • DEFS
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which Windows security descriptor component specifies which security principals are allowed or denied specific permissions on an object?

   • ADiscretionary Access Control List (DACL)
   • BSystem Access Control List (SACL)
   • COwner SID
   • DIntegrity Level
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   An administrator needs to allow a standard user to run a specific legacy application that requires administrator privileges, without granting the user full administrative rights. The application is not compatible with UAC's 'Run as administrator' feature. Which approach should the administrator use?

   • ACreate a scheduled task that runs the application with the user's credentials but with the 'Run with highest privileges' option enabled.
   • BUse a Group Policy 'Software Restriction Policy' to allow the application to run with elevated privileges.
   • CUse Application Compatibility Toolkit to set the 'RunAsInvoker' compatibility flag.
   • DAdd the user to the local Administrators group and disable UAC for the application.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security administrator needs to grant a support team read-only access to a sensitive folder on a Windows file server. The folder currently inherits permissions from the parent. The administrator wants the change to be effective immediately and to apply only to this folder, not to subfolders. Which approach should the administrator use?

   • AAdd the support team with Read and Execute to the folder's DACL while leaving inheritance enabled.
   • BCreate a new security group and add it to the parent folder's DACL with Read and Execute.
   • CUse icacls to grant the support team Modify permission on the folder and all subfolders.
   • DDisable inheritance on the folder, copy inherited permissions, then add the support team with Read and Execute on This folder only.
   Reveal Solution Discussion Select an answer first