A laptop user stores sensitive client files in a folder on their Windows 10 device. The company requires that the files be encrypted so that if the laptop is stolen, the data cannot be read. The user also needs to access these files from another computer on the domain. Which technology should the administrator implement?

Encrypting File System (EFS) on the folder.

Windows Defender Application Control to restrict access to the folder.

BitLocker Drive Encryption on the system drive.

DPAPI with a user-specific master key.

An organization wants to protect against credential dumping on Windows 10 devices. They have enabled Credential Guard, but they also need to protect the Local Security Authority (LSA) process. Which additional configuration should they implement?

Set 'Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers' to 'Deny all'.

Disable NTLM authentication in the domain.

Enable 'Run as PPL' (Protected Process Light) for LSA.

Add all users to the Protected Users group.

An organization uses WSUS to manage updates for Windows servers. They want to ensure that critical security updates are deployed quickly, but they also want to test updates before deploying them to production. Which WSUS configuration should they use?

Use automatic approval rules to approve all updates for production.

Disable WSUS and use Windows Update directly.

Create a test group, approve updates for the test group first, and then approve for production after a validation period.

Approve all updates for production immediately without testing.

GIAC Security Essentials

Domain 4Objective 8

Windows Security Infrastructure GSEC Practice Questions (Page 9)

Part of the Endpoint and Platform Security domain, which makes up ~32% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~30–51 in this domain), expect 3–6 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

12concepts

12 Concepts in This Objective

Windows Security Architecture
Authentication Mechanisms
Authorization and Access Control
Security Policies and Group Policy
User Account Control (UAC)
Windows Firewall and Network Security
Encryption and Data Protection
Patch Management and Updates
Security Auditing and Logging
Windows Defender and Endpoint Protection
Secure Configuration and Hardening
Credential Protection and Management

Questions 41–45

41foundation · easy
Which Windows authentication protocol is the default for domain-joined systems and uses tickets issued by a Key Distribution Center (KDC)?
Select an answer first
42application · medium
A laptop user stores sensitive client files in a folder on their Windows 10 device. The company requires that the files be encrypted so that if the laptop is stolen, the data cannot be read. The user also needs to access these files from another computer on the domain. Which technology should the administrator implement?
Select an answer first
43expert · hard
An organization wants to protect against credential dumping on Windows 10 devices. They have enabled Credential Guard, but they also need to protect the Local Security Authority (LSA) process. Which additional configuration should they implement?
Select an answer first
44expert · hard
An organization uses WSUS to manage updates for Windows servers. They want to ensure that critical security updates are deployed quickly, but they also want to test updates before deploying them to production. Which WSUS configuration should they use?
Select an answer first
45foundation · easy
Which Windows event log contains security-related events such as logon attempts and object access auditing?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Windows Security Infrastructure GSEC Practice Questions (Page 9)

Questions 41–45

Which Windows authentication protocol is the default for domain-joined systems and uses tickets issued by a Key Distribution Center (KDC)?

An organization wants to protect against credential dumping on Windows 10 devices. They have enabled Credential Guard, but they also need to protect the Local Security Authority (LSA) process. Which additional configuration should they implement?

An organization uses WSUS to manage updates for Windows servers. They want to ensure that critical security updates are deployed quickly, but they also want to test updates before deploying them to production. Which WSUS configuration should they use?

Which Windows event log contains security-related events such as logon attempts and object access auditing?

Keep studying — Endpoint and Platform Security