A company is adopting Microsoft 365 and wants to understand which security responsibilities remain with the customer. Which of the following is the customer's responsibility under the shared responsibility model?

Managing user identities and their access permissions

Patching the underlying hypervisor

Ensuring the Microsoft 365 service is available

Physical security of Microsoft datacenters

A company is using Microsoft 365 and wants to ensure that only authorized users can access sensitive files stored in SharePoint Online. They have enabled MFA and Conditional Access. However, they are concerned about users who have left the company but still have active accounts. What should they do to mitigate this risk?

Implement a regular access review process using Entra ID Governance to recertify access.

Disable external sharing for all SharePoint sites.

Rely on MFA to prevent former employees from accessing files.

Use Microsoft Defender for Office 365 to block former employees.

A Windows server runs a legacy line-of-business application as a service. The application vendor requires that the service be able to access network shares and also restart automatically if it fails. The current service runs under the LocalSystem account. During a security review, you are asked to reduce the risk if the service is compromised. Which action best meets the vendor requirements while improving security?

Keep LocalSystem but restrict the service's access to network shares using a firewall rule.

Create a dedicated domain service account with only the permissions needed for the network shares, and configure the service to use it.

Change the service to run under the NetworkService account and grant it access to the shares.

Run the service under the LocalSystem account but enable the 'Do not allow services to interact with the desktop' setting.

Which feature of Microsoft Entra ID allows users to sign in once and access multiple cloud applications without re-entering credentials?

Multi-Factor Authentication (MFA)

GIAC Security Essentials

Domain 4Objective 9

Windows Services and Microsoft Cloud GSEC Practice Questions (Page 2)

Part of the Endpoint and Platform Security domain, which makes up ~32% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~30–51 in this domain), expect 3–6 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

7concepts

Questions 6–10

6foundation · easy
What is the default startup type for a Windows service that should start automatically when the system boots?
Select an answer first
7application · medium
A company is adopting Microsoft 365 and wants to understand which security responsibilities remain with the customer. Which of the following is the customer's responsibility under the shared responsibility model?
Select an answer first
8expert · hard
A company is using Microsoft 365 and wants to ensure that only authorized users can access sensitive files stored in SharePoint Online. They have enabled MFA and Conditional Access. However, they are concerned about users who have left the company but still have active accounts. What should they do to mitigate this risk?
Select an answer first
9application · medium
A Windows server runs a legacy line-of-business application as a service. The application vendor requires that the service be able to access network shares and also restart automatically if it fails. The current service runs under the LocalSystem account. During a security review, you are asked to reduce the risk if the service is compromised. Which action best meets the vendor requirements while improving security?
Select an answer first
10foundation · easy
Which feature of Microsoft Entra ID allows users to sign in once and access multiple cloud applications without re-entering credentials?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Windows Services and Microsoft Cloud GSEC Practice Questions (Page 2)

Questions 6–10

What is the default startup type for a Windows service that should start automatically when the system boots?

A company is adopting Microsoft 365 and wants to understand which security responsibilities remain with the customer. Which of the following is the customer's responsibility under the shared responsibility model?

Which feature of Microsoft Entra ID allows users to sign in once and access multiple cloud applications without re-entering credentials?

Keep studying — Endpoint and Platform Security