GIAC logoGSEC

GIAC Security Essentials practice exams

Original questions written from the published objectives and cited to official documentation, never recalled exam content. How we verify, why not dumps.

Exam code
GSEC
Cost
$999USD
Questions
106
Duration
240minutes
Passing score
72percent
Level
Mid level
Valid for
4years
Study guide
How to prepare
Sources
33official pages
Format
CyberLive: written questions plus hands-on lab tasks

GSEC practice exams

2 full-length forms, 106 questions each, apportioned to the published domain weightings.

GSECGIAC Security Essentials

A reviewer asks an engineer to describe, without notation, how RFC 2104 composes the two hash passes over the data. What is the correct description?

The answer

An inner hash over the message, then an outer hash of that

Checked against

To compute HMAC over the data `text' we perform H(K XOR opad, H(K XOR ipad, text))…

rfc-editor.org, checked August 2026
Answer five like it, free

What the exam tests

Exam domains

GIAC publishes a list of exam objectives rather than weighted domains. The groupings and percentages here are ours, built from the published objective list so you can see the shape of the exam. Treat them as a study aid, not an official weighting.

The percentage is the exam weighting; the bar is how many verified questions we hold there, so a short bar is where our bank is thin.

6domains
  • Defense in Depth and Defensible Network Architecture20%
    42 verified
  • Cryptography15%
    32 verified
  • Access Control and Password Management15%
    32 verified
  • Linux Security15%
    32 verified
  • Windows Security20%
    42 verified
  • Incident Handling and Response15%
    32 verified

Where to focus: The hands-on portion cannot be revised for by reading. Build a lab, run the tools the objectives name, and get fast at them; that is where the CyberLive marks are.

What the exam actually asks you to do

A CyberLive exam. Alongside the written questions you are dropped into virtual machines running the real tools, and scored on what you find and do rather than on which option you pick.

Item formats

  • Multiple choice
  • Hands-on lab

The highlighted formats are the ones you cannot answer from memory alone. GIAC, GSEC certification details

Between sittings

The same bank the numbered forms are assembled from.

  • Quick Practice

    Open now

    All 212 verified questions, untimed, with the explanation after each answer.

  • Domain Drill

    Open now

    Every domain on its own, for the area a score report says is weakest.

  • Review Missed

    Fills as you go

    Re-asks the questions you got wrong. Nothing to review until you miss something.

Open GSEC practice

GIAC’s free resources

Study from the source. Everything below is published by the vendor, free to read, and is what our own questions are written from:

Official GSEC exam page & objectives ↗

Keep reading

  • Free GSEC practice test

    Ten real questions, playable now. No account, no card.

  • GSEC passing score

    The exact cut score, what kind of number it is, and the retake terms.

  • How hard is GSEC?

    An honest difficulty read from the format, the clock and the weights.

  • What GSEC costs

    The voucher price, the retake, and what renewal costs across the cycle.

  • GSEC guide

    Who it is for, study plans by experience level, and whether it is worth it.

Compared with

Side by side on cost, difficulty, and which one to take first.

Every guide and cost breakdown, by vendor

Frequently asked questions

Why does GSEC cost so much more than Security+?

GIAC prices a certification attempt at $999 on its own, and it is normally bought bundled with SANS training that costs several thousand more. It is priced as an employer-funded credential, which is exactly how most people get it.

Is GSEC hands-on?

Yes. GSEC runs under GIAC's CyberLive format, which puts you in virtual machines with the real tools and scores what you actually do. That is unusual at this level and it is the main reason GSEC carries more weight than a comparable written exam.

Can I bring notes into GSEC?

GIAC exams have historically permitted printed reference material, and building a well indexed set of notes is the standard preparation strategy. Confirm what is allowed on GIAC's own exam policy page before you sit it, because the rules differ by delivery method.

GSEC or Security+?

Security+ if you are paying yourself, GSEC if an employer is paying and you want depth. GSEC goes considerably deeper on Windows and Linux internals, and its recognition inside government and defence contracting is strong.

How long is GSEC valid?

Four years, which is longer than most. Renewal is 36 CPE credits plus a renewal fee, or passing the current exam again.