GISF: GIAC Information Security Fundamentals

By GIAC · Browse Mode
About the Exam

GISF is a GIAC Practitioner Certification that covers the foundations of security, computer functions and networking, introductory cryptography, and cybersecurity technologies. It is aimed at people new to cybersecurity, non-IT security managers, professionals with basic technical knowledge, career changers, system administrators, and others who work with enterprise security policy. Passing demonstrates that the candidate understands key information security concepts and can apply best practices to protect organizations against threats and risks to information and information resources.

Exam Topics

  • Adversary Analysis and Threat Frameworks9%
  • Defensive Technologies and Emerging Intelligence9%
  • Foundations of Cryptography and Digital Trust9%
  • Foundations of Cybersecurity9%
  • Foundations of Network Communication9%
  • Identity, Access and Data Protection9%
  • Intrusion and Initial Access Techniques9%
  • Managing and Mitigating Cyber Risk9%
  • Network Security and Architecture9%
  • Post-Exploitation and Advanced Threat Techniques9%
  • Securing Connected and Cloud-Based Environments9%
  • Security Foundations and Awareness9%

How to Use This Practice Exam

  1. Browse — Read each question, select your answer, and reveal the explanation.
  2. Exam Mode — Simulate real exam conditions with a timed session and score report.
  3. Learn Mode — Spaced repetition schedules questions you struggle with for long-term retention.

Download the Full Exam PDF

Get every question and answer in a clean, printable PDF built for offline study. Purchase once, keep permanent access, and re-download the latest version anytime.

Get PDF
Learn More

Last updated November 28, 2025 at 8:56 PM

Topic filter
Retired questions
Question sort
Questions per page

QuestionQ1

Network Security and Architecture

You are an Exchange Administrator for TechWorld Inc. The company uses a Windows 2008 Active Directory-based network. The network includes an Exchange Server 2010 organization. The messaging organization has one Hub Transport server, one Client Access server, and two Mailbox servers.

You plan to deploy an Edge Transport server in the messaging organization to reduce the attack surface. At which of the following locations should you deploy the Edge Transport server?

Explanation

An Exchange Edge Transport server is deployed in the perimeter network to process internet-facing mail flow and shield internal Exchange servers from direct internet exposure, thereby reducing the organization’s attack surface.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ2

Managing and Mitigating Cyber Risk

You are a security manager for Qualxiss Inc. Your company uses the OODA loop to resolve and make decisions about company issues. You have detected a security-breach issue in your company.

Which of the following breach-related procedures is part of the observe phase of the OODA loop?

Explanation

The Observe phase focuses on recognizing and monitoring the incident while operating according to established security guidance. Previous breach experience is used during orientation, selecting an activity is the Decide phase, and carrying out policies is the Act phase.

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ3

Foundations of Network Communication

Which of the following protocols are used by Network Attached Storage (NAS)?

Each correct answer represents a complete solution. Choose all that apply.

Choose three
Explanation

Network Attached Storage provides file-level access through network file-sharing protocols, including Apple Filing Protocol (AFP), Server Message Block (SMB), and Network File System (NFS). Distributed File System (Dfs) is a distributed namespace and replication technology rather than a NAS file-access protocol.

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ4

Foundations of Cybersecurity

You are an Incident Manager at Orangesect.Inc. You have been assigned to establish a new extension of the enterprise. The networking required for the new extension needs different cable types and an appropriate policy, which you will determine. Which stage of the incident-handling process involves this decision-making?

Explanation

Preparation establishes the capabilities, resources, policies, and procedures needed to handle incidents. Determining network cabling and the related policy is therefore a preparation activity, rather than incident identification, containment, or eradication.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ5

Intrusion and Initial Access Techniques

You are the security manager of Microliss Inc. Your enterprise uses a wireless network infrastructure with access points that range from 150–350 feet. Employees using the network report that their passwords and important official information have been traced. You uncover the following clues:

  • The information has proven beneficial to another company.
  • The other company is located approximately 340 feet from your office.
  • The other company also uses a wireless network.
  • Your network bandwidth has degraded significantly.

Which of the following attack methods has been used?

Explanation

Piggybacking occurs when an unauthorized party within range accesses and uses another party’s unsecured wireless network. That access can expose network traffic and sensitive information, while the unauthorized use of the connection can substantially reduce available bandwidth. The nearby company’s location falls within the stated wireless access-point range.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!
Know a question that should be here? Contribute to this exam
Back home