What is the purpose of a Windows security baseline?

To provide a set of recommended security configuration settings for Windows systems

To replace the need for antivirus software

To automatically patch all vulnerabilities

To monitor user activity in real time

In the Windows security architecture, which component is responsible for validating access requests by comparing the access token's privileges and group memberships against the security descriptor's DACL?

Local Security Authority Subsystem (LSASS)

What is the primary purpose of an access token in Windows authorization?

To store the user's password hash for authentication

To identify the user and their group memberships and privileges during access checks

To record failed logon attempts in the security log

To encrypt files and folders on the local disk

A small business has 50 Windows 10 Pro workstations that are not domain-joined. They want to ensure that security updates are installed automatically, but they also want to control when reboots occur to avoid disrupting business hours. What is the best approach?

Use Group Policy to configure Windows Update to 'Auto install and restart' at a specific time outside business hours.

Configure Active Hours in Windows Update settings on each workstation to define the hours when reboots are not allowed.

Disable Windows Update and manually install updates monthly.

Configure Windows Update to 'Automatically download updates, but let me choose when to install them' on each workstation.

A domain administrator wants to protect against pass-the-hash attacks on domain-joined Windows 10 workstations. They have already enabled Credential Guard. What additional measure should they implement to further protect domain administrator credentials?

Add the domain administrator accounts to the Protected Users group.

Enable the 'Accounts: Limit local account use of blank passwords to console logon only' policy.

Set the 'Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers' to 'Allow all'.

Disable the Local Security Authority (LSA) protection.

GIAC Security Essentials

Domain 4Objective 8

Windows Security Infrastructure GSEC Practice Questions (Page 7)

Part of the Endpoint and Platform Security domain, which makes up ~32% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~30–51 in this domain), expect 3–6 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

12concepts

12 Concepts in This Objective

Windows Security Architecture
Authentication Mechanisms
Authorization and Access Control
Security Policies and Group Policy
User Account Control (UAC)
Windows Firewall and Network Security
Encryption and Data Protection
Patch Management and Updates
Security Auditing and Logging
Windows Defender and Endpoint Protection
Secure Configuration and Hardening
Credential Protection and Management

Questions 31–35

31foundation · easy
What is the purpose of a Windows security baseline?
Select an answer first
32foundation · easy
In the Windows security architecture, which component is responsible for validating access requests by comparing the access token's privileges and group memberships against the security descriptor's DACL?
Select an answer first
33foundation · easy
What is the primary purpose of an access token in Windows authorization?
Select an answer first
34application · medium
A small business has 50 Windows 10 Pro workstations that are not domain-joined. They want to ensure that security updates are installed automatically, but they also want to control when reboots occur to avoid disrupting business hours. What is the best approach?
Select an answer first
35application · medium
A domain administrator wants to protect against pass-the-hash attacks on domain-joined Windows 10 workstations. They have already enabled Credential Guard. What additional measure should they implement to further protect domain administrator credentials?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.