A company is deploying Windows Defender to protect endpoints. They want to ensure that malware signatures are updated frequently and that scans run automatically. Which configuration should they use?

Use only the built-in signature updates that occur once per week.

Disable real-time protection and rely on weekly full scans.

Enable Windows Defender Antivirus with cloud-delivered protection and set a daily quick scan.

Configure Windows Defender to run only when the system is idle.

Which of the following is a best practice for patch management in a Windows environment?

Apply patches immediately to all systems without testing

Deploy patches to a pilot group before broad deployment

Only install security updates, not feature updates

Disable automatic updates to avoid interruptions

Which UAC setting would you configure to require an administrator to enter a password when a standard user attempts to perform an administrative task?

Switch to the secure desktop when prompting for elevation

Prompt for credentials on the secure desktop

Automatically deny elevation requests

Prompt for consent on the secure desktop

A company has a fleet of Windows 10 workstations that are not domain-joined. They want to ensure that all workstations receive security updates within 7 days of release. They also want to avoid reboots during business hours. What is the best approach?

Use WSUS to manage updates for all workstations.

Disable Windows Update and manually install updates monthly.

Set Windows Update to 'Automatically download updates, but let me choose when to install them'.

Configure Windows Update for Business (WUfB) using local Group Policy or the registry.

GIAC Security Essentials

Domain 4Objective 8

Windows Security Infrastructure GSEC Practice Questions (Page 3)

Part of the Endpoint and Platform Security domain, which makes up ~32% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~30–51 in this domain), expect 3–6 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

12concepts

12 Concepts in This Objective

Windows Security Architecture
Authentication Mechanisms
Authorization and Access Control
Security Policies and Group Policy
User Account Control (UAC)
Windows Firewall and Network Security
Encryption and Data Protection
Patch Management and Updates
Security Auditing and Logging
Windows Defender and Endpoint Protection
Secure Configuration and Hardening
Credential Protection and Management

Questions 11–15

11application · medium
A company is deploying Windows Defender to protect endpoints. They want to ensure that malware signatures are updated frequently and that scans run automatically. Which configuration should they use?
Select an answer first
12foundation · easy
Which authentication mechanism is used when a user logs on to a standalone Windows workstation with a local account?
Select an answer first
13foundation · easy
Which of the following is a best practice for patch management in a Windows environment?
Select an answer first
14foundation · easy
Which UAC setting would you configure to require an administrator to enter a password when a standard user attempts to perform an administrative task?
Select an answer first
15application · medium
A company has a fleet of Windows 10 workstations that are not domain-joined. They want to ensure that all workstations receive security updates within 7 days of release. They also want to avoid reboots during business hours. What is the best approach?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.