What is the primary role of Microsoft Entra ID (formerly Azure Active Directory) in a cloud environment?

Managing identities and access for cloud applications

A company uses Microsoft 365 and wants to prevent sensitive credit card numbers from being sent in emails. They have already enabled Microsoft Defender for Office 365. What additional Microsoft 365 security feature should they configure to meet this requirement?

Information Rights Management (IRM) policy

Mail flow rules (transport rules)

Data Loss Prevention (DLP) policy

A Windows service is configured to run as LocalSystem and has a dependency on another service that is set to 'Manual'. The service fails to start. What is the most likely cause?

The service has a recovery action set to 'Restart the Service' and has exceeded the restart count.

The dependent service is not running because it is set to 'Manual' and no other service triggered it.

The service is set to 'Automatic (Delayed Start)' and the delay has not elapsed.

The service account lacks the 'Log on as a service' right.

Which cloud service model gives the customer the most control over the operating system and applications?

Infrastructure as a Service (IaaS)

An organization uses Microsoft 365 and wants to protect against ransomware that encrypts files in OneDrive and SharePoint. They have enabled versioning and retention policies. What additional measure should they implement to improve resilience?

Rely solely on retention policies to recover from ransomware.

Disable versioning to reduce storage costs.

Enable Microsoft Defender for Office 365 Safe Attachments and Safe Links, and use the ransomware detection feature in SharePoint.

Use a third-party backup solution that does not integrate with Microsoft 365.

GIAC Security Essentials

Domain 4Objective 9

Windows Services and Microsoft Cloud GSEC Practice Questions (Page 4)

Part of the Endpoint and Platform Security domain, which makes up ~32% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~30–51 in this domain), expect 3–6 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

7concepts

Questions 16–20

16foundation · easy
What is the primary role of Microsoft Entra ID (formerly Azure Active Directory) in a cloud environment?
Select an answer first
17application · medium
A company uses Microsoft 365 and wants to prevent sensitive credit card numbers from being sent in emails. They have already enabled Microsoft Defender for Office 365. What additional Microsoft 365 security feature should they configure to meet this requirement?
Select an answer first
18expert · hard
A Windows service is configured to run as LocalSystem and has a dependency on another service that is set to 'Manual'. The service fails to start. What is the most likely cause?
Select an answer first
19foundation · easy
Which cloud service model gives the customer the most control over the operating system and applications?
Select an answer first
20expert · hard
An organization uses Microsoft 365 and wants to protect against ransomware that encrypts files in OneDrive and SharePoint. They have enabled versioning and retention policies. What additional measure should they implement to improve resilience?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.