About the Exam

GSEC validates practical understanding of information security beyond terminology and concepts. It covers defense in depth, network and web security, incident handling and response, cryptography, Linux and Windows security, cloud security, SIEM, and vulnerability scanning and penetration testing. It is aimed at new information security professionals, security managers and administrators, IT engineers, forensic analysts, penetration testers, and auditors. Passing the exam demonstrates hands-on capability for security tasks in IT systems.

Exam Topics

  • Access Control & Password Management0%
  • Container and MacOS Security0%
  • Cryptography0%
  • Cryptography Application0%
  • Data Loss Prevention and Mobile Device Security0%
  • Defense in Depth0%
  • Defensible Network Architecture0%
  • Endpoint Security0%
  • Enforcing Windows Security Policy0%
  • Incident Handling & Response0%
  • Linux Fundamentals0%
  • Linux Security and Hardening0%
  • Log Management & SIEM0%
  • Malicious Code & Exploit Mitigation0%
  • Network Security Devices0%
  • Networking & Protocols0%
  • Security Frameworks and CIS Controls0%
  • Virtualization, Cloud Security, and AI Essentials0%
  • Vulnerability Scanning and Penetration Testing0%
  • Web Communication Security0%
  • Windows Access Controls0%
  • Windows as a Service0%
  • Windows Automation, Auditing, and Forensics0%
  • Windows Security Infrastructure0%
  • Windows Services and Microsoft Cloud0%
  • Wireless Network Security0%

How to Use This Practice Exam

  1. Browse — Read each question, select your answer, and reveal the explanation.
  2. Exam Mode — Simulate real exam conditions with a timed session and score report.
  3. Learn Mode — Spaced repetition schedules questions you struggle with for long-term retention.

Download the Full Exam PDF

Get every question and answer in a clean, printable PDF built for offline study. Purchase once, keep permanent access, and re-download the latest version anytime.

Last updated June 28, 2026 at 7:51 AM

Topic filter
Retired questions
Question sort

QuestionQ1

Enforcing Windows Security Policy

When are Group Policy Objects (GPOs) not automatically applied to workstations?

  • A At 90-minute intervals
  • B At logon
  • C Every time Windows Explorer is launched
  • D At boot-up
Explanation

Windows applies Group Policy during computer startup and user logon, and refreshes it in the background every 90 minutes by default. Launching Windows Explorer does not automatically trigger Group Policy processing.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ2

Windows Access Controls

Which of the following is a valid reason for using a Windows workgroup?

  • A Lower initial cost
  • B Simplicity of single sign-on
  • C Centralized control
  • D Consistent permissions and rights
Explanation

A Windows workgroup is a peer-to-peer network model that avoids the infrastructure required for an Active Directory domain, making it a lower-cost choice for a small network. Devices are peers and maintain their own user accounts, so workgroups do not provide centralized control, consistent centrally managed permissions, or domain single sign-on.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ3

Cryptography

Which of the following is a property of hash operations?

  • A Asymmetric
  • B Non-reversible
  • C Symmetric
  • D Variable length output
Explanation

Hash operations are non-reversible: a hash digest cannot feasibly be used to reconstruct its original input.

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ4

Enforcing Windows Security Policy

What is the discipline called that establishes a known baseline and manages that state?

  • A Condition deployment
  • B Observation discipline
  • C Security establishment
  • D Configuration management
Explanation

Configuration management establishes a known baseline for a system or asset and controls, records, and maintains changes to that baseline over time.

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ5

Linux Security and Hardening

Which of the following Linux commands can modify both the username and group name that own a file?

  • A chown
  • B chgrp
  • C chmod
  • D newgrp
Explanation

chown changes a file’s user ownership and can also change its group ownership when supplied in owner:group form, such as chown alice:developers file.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!
Know a question that should be here? Contribute to this exam
Back home