Which Windows component is responsible for managing the lifecycle of Windows services, including starting, stopping, and restarting them?

Windows Management Instrumentation (WMI)

A small business is moving its file storage to Microsoft 365 and wants to ensure that only authorized users can access the data from managed devices. They have no on-premises servers. Which combination of Microsoft cloud features should they use?

Entra ID with conditional access policies and Microsoft Intune for device compliance.

Microsoft Intune alone with device configuration profiles.

Entra ID with self-service password reset and Microsoft Defender for Office 365.

Microsoft Purview with data loss prevention policies and Entra ID.

Which type of service account is designed to be used by a single service and automatically managed by Windows, including password changes?

Group Managed Service Account (gMSA)

What is the purpose of Conditional Access in Microsoft cloud endpoint protection?

To provide a virtual private network (VPN) connection

To encrypt all data on the device

To enforce security policies based on user, device, and location signals

To automatically patch all devices

A company uses Entra ID with a hybrid environment. They want to require MFA for all cloud users but exclude users who are in a specific office because they have legacy phones that cannot receive MFA prompts. Which approach should they use?

Use Entra ID Identity Protection to require MFA based on risk.

Enable security defaults, which enforce MFA for all users.

Use per-user MFA to enable MFA for all users except the office users.

Create a conditional access policy that requires MFA for all users, and exclude the office's users group.

GIAC Security Essentials

Domain 4Objective 9

Windows Services and Microsoft Cloud GSEC Practice Questions (Page 1)

Part of the Endpoint and Platform Security domain, which makes up ~32% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~30–51 in this domain), expect 3–6 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

7concepts

Questions 1–5

1foundation · easy
Which Windows component is responsible for managing the lifecycle of Windows services, including starting, stopping, and restarting them?
Select an answer first
2application · medium
A small business is moving its file storage to Microsoft 365 and wants to ensure that only authorized users can access the data from managed devices. They have no on-premises servers. Which combination of Microsoft cloud features should they use?
Select an answer first
3foundation · easy
Which type of service account is designed to be used by a single service and automatically managed by Windows, including password changes?
Select an answer first
4foundation · easy
What is the purpose of Conditional Access in Microsoft cloud endpoint protection?
Select an answer first
5expert · hard
A company uses Entra ID with a hybrid environment. They want to require MFA for all cloud users but exclude users who are in a specific office because they have legacy phones that cannot receive MFA prompts. Which approach should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.