A Windows server runs a database service and a web application service. The web application service only needs to connect to the database on the same server. The database service must be accessible only from the web application service, not from other processes. Which hardening measure is most effective?

Set the database service to run under the LocalSystem account.

Configure Windows Firewall rules to allow only the web application service's executable to connect to the database port.

Use a shared service account for both services.

Disable the web application service when not in use.

Which practice is a key step in hardening a Windows service?

Granting the service full control over system files

Setting the service to start automatically

Disabling the service if it is not needed

Running the service under the Local System account

A Windows server runs a critical service that must be available 24/7. The service currently runs as LocalSystem and has been compromised in the past. You must reduce the risk of compromise without causing downtime. Which approach best balances security and availability?

Leave the service as LocalSystem but enable Windows Defender Application Control (WDAC) to restrict executables.

Apply a host firewall rule to block all inbound traffic to the service port.

Change the service to run as a least-privilege domain account during a scheduled maintenance window.

Disable the service until a new account is created.

In the Microsoft cloud shared responsibility model, which of the following is typically the customer's responsibility?

Patching the host operating system

Physical security of the data center

Maintaining the network infrastructure

Which Microsoft 365 security feature is designed to protect against malicious links and attachments in email?

Microsoft Purview Compliance Manager

Microsoft Defender for Office 365

GIAC Security Essentials

Domain 4Objective 9

Windows Services and Microsoft Cloud GSEC Practice Questions (Page 6)

Part of the Endpoint and Platform Security domain, which makes up ~32% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~30–51 in this domain), expect 3–6 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

7concepts

Questions 26–30

26application · medium
A Windows server runs a database service and a web application service. The web application service only needs to connect to the database on the same server. The database service must be accessible only from the web application service, not from other processes. Which hardening measure is most effective?
Select an answer first
27foundation · easy
Which practice is a key step in hardening a Windows service?
Select an answer first
28expert · hard
A Windows server runs a critical service that must be available 24/7. The service currently runs as LocalSystem and has been compromised in the past. You must reduce the risk of compromise without causing downtime. Which approach best balances security and availability?
Select an answer first
29foundation · easy
In the Microsoft cloud shared responsibility model, which of the following is typically the customer's responsibility?
Select an answer first
30foundation · easy
Which Microsoft 365 security feature is designed to protect against malicious links and attachments in email?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.