GIAC Security Essentials practice questions
Original questions written from the published exam objectives, never recalled exam content, with an explanation that teaches the concept behind every answer. Why that matters.
- Exam code
- GSEC
- Cost
- $999 USD
- Questions
- 106
- Duration
- 240 minutes
- Passing score
- 72 percent
- Format
- CyberLive: written questions plus hands-on lab tasks
The GSEC exam costs $999. Fail it and the retake is another $999. Practicing until you are ready is the cheapest part of this. Full cost breakdown.
Exam domains and official weightings
From the official GIAC certification objectives. Put your study time where the weight is.
GIAC publishes a list of exam objectives rather than weighted domains. The groupings and percentages here are ours, built from the published objective list so you can see the shape of the exam. Treat them as a study aid, not an official weighting.
- Defense in Depth and Defensible Network Architecture20%
- Cryptography15%
- Access Control and Password Management15%
- Linux Security15%
- Windows Security20%
- Incident Handling and Response15%
- Defense in Depth and Defensible Network Architecture20%
- Cryptography15%
- Access Control and Password Management15%
- Linux Security15%
- Windows Security20%
- Incident Handling and Response15%
Where to focus: The hands-on portion cannot be revised for by reading. Build a lab, run the tools the objectives name, and get fast at them; that is where the CyberLive marks are.
Try 5 free sample questions
No account needed. Every question includes our three-tier explanation: the concept, why the answer follows, and why each wrong option is wrong.
Sample question 1 of 5
A flat network lets a compromised reception workstation reach the finance database directly. Which change most reduces the blast radius of that compromise?
Sample question 2 of 5
Why is bcrypt a better choice than SHA-256 for storing passwords?
Sample question 3 of 5
A file listing shows:
-rwsr-xr-x 1 root root 54160 Mar 3 09:12 /usr/local/bin/reportWhat is the security consequence of the s in the owner's execute position?
Sample question 4 of 5
Why does disabling NTLM in favour of Kerberos improve a Windows domain's security posture?
Sample question 5 of 5
In the standard incident handling process, what is the purpose of the lessons learned phase?
Full GSEC question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
What the exam actually asks you to do
A CyberLive exam. Alongside the written questions you are dropped into virtual machines running the real tools, and scored on what you find and do rather than on which option you pick.
- Multiple choice
- Hands-on lab
The highlighted formats are the ones you cannot answer from memory alone. GIAC, GSEC certification details ↗
An honest study plan
1. Read the official objectives first
Download the official objectives from GIAC and skim every line. The exam can only test what’s listed there, it’s the contract.
2. Weight your study toward Defense in Depth and Defensible Network Architecture and Windows Security
Together the top two domains are 40% of the exam. Practice them until your accuracy is consistently above 80%.
3. Drill weak domains, then take a mock exam
Use Domain Drill on your weakest areas, then a full timed mock at real length (106 questions, 240 minutes). Book the real exam when you’re consistently passing mocks, not before.
Official free resources
Study from the source. These are GIAC’s own materials:
Official GSEC exam page & objectives ↗Where GSEC fits
Related certifications
Frequently asked questions
Why does GSEC cost so much more than Security+?
GIAC prices a certification attempt at $999 on its own, and it is normally bought bundled with SANS training that costs several thousand more. It is priced as an employer-funded credential, which is exactly how most people get it.
Is GSEC hands-on?
Yes. GSEC runs under GIAC's CyberLive format, which puts you in virtual machines with the real tools and scores what you actually do. That is unusual at this level and it is the main reason GSEC carries more weight than a comparable written exam.
Can I bring notes into GSEC?
GIAC exams have historically permitted printed reference material, and building a well indexed set of notes is the standard preparation strategy. Confirm what is allowed on GIAC's own exam policy page before you sit it, because the rules differ by delivery method.
GSEC or Security+?
Security+ if you are paying yourself, GSEC if an employer is paying and you want depth. GSEC goes considerably deeper on Windows and Linux internals, and its recognition inside government and defence contracting is strong.
How long is GSEC valid?
Four years, which is longer than most. Renewal is 36 CPE credits plus a renewal fee, or passing the current exam again.
Ready to practice for GSEC?
Play the free samples now. The full question bank is in progress, and you can join the waitlist on any sample question.
Payment is not switched on yet. Everything free stays free either way, and explanations are never behind a payment.
$29 buys the GSEC bank for good, including everything added to it later. Right now that is 5 sample questions, so buy it to back the work rather than for what is there today. Or go Pro for every certification.