Free practice test

GSEC

Free GIAC Security Essentials practice test

10 original GSEC questions, playable right now. No account, no card, no email gate. Every answer opens the full explanation: the concept, why the right option is right, and why each wrong option is wrong, cited to the authoritative documentation behind it.

Sample question 1 of 10

defensible-architecture-segmentationDefense in Depth and Defensible Network Architecture

An organization keeps subdividing its environment into ever smaller segments. Which risk does the guidance name?

Sample question 2 of 10

windows-security-uac-elevation-surfaceWindows Security

When an application asks to run with a full administrator token, the file's publisher is examined first. Into which groups are applications sorted?

Sample question 3 of 10

access-control-entra-password-protectionAccess Control and Password Management

A user named Poll tries to reset a password to p0LL23fb. Which check rejects it, and why does the length of the name matter?

Sample question 4 of 10

cryptography-password-based-key-derivationCryptography

An analyst asks why a salt is stored in the clear alongside a derived key. What does RFC 8018 say the salt is for?

Sample question 5 of 10

incident-handling-cloudtrailIncident Handling and Response

How many types of event does CloudTrail log?

Sample question 6 of 10

linux-security-selinux-modesLinux Security

An engineer compares AVC output between enforcing and permissive mode for the same directory read. What difference does the documentation describe?

Sample question 7 of 10

defensible-architecture-network-aclsDefense in Depth and Defensible Network Architecture

An engineer adds an inbound allow rule to a network ACL and finds the replies never leave the subnet. Why?

Sample question 8 of 10

windows-security-credential-guardWindows Security

An analyst reports that malware ran with administrative rights on a workstation but could not harvest cached domain credentials. Which Credential Guard property explains that?

Sample question 9 of 10

access-control-linux-accounts-and-ownershipAccess Control and Password Management

A user owns a file and wants to hand it over to a colleague's account outright. Which change is reserved to the superuser?

Sample question 10 of 10

cryptography-tls13-handshakeCryptography

An engineer migrating a service to TLS 1.3 asks what became of the older resumption mechanisms. What does the specification say?

Full GSEC question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

What this test covers

These 10 questions are drawn across the published exam blueprint rather than from one chapter: this set touches Defense in Depth and Defensible Network Architecture, Windows Security, Access Control and Password Management, Cryptography, Incident Handling and Response, Linux Security. Every question is original, written from the official objectives, and verified against a cited vendor page before it serves. None are recalled exam content, which is why the explanations can cite their sources.

A 10-question sample tells you where you stand, not whether you are ready. The full experience is numbered practice exams: 106 questions apportioned to the official domain weightings, sat under the real 240-minute clock and scored against the published cut score.

Keep reading

Every guide and cost breakdown, by vendor