GIAC Defensible Security Architect (GDSA) Free Practice Test

Question 1

Which OSI model layer is synonymous with Layer 3 defense?
Response:

A. Managing application-specific communications over the network efficiently.

B. Establishing network connections and providing error detection at the data link level.

C. Facilitating data packet routing based on logical addressing and path determination.

D. Ensuring reliable data transfer with proper sequencing and error control mechanisms.

Correct Answer: C

Question 2

Which strategies can help mitigate risks related to data mobility in an organization?
(Choose two)
Response:

A. Implementing Mobile Device Management (MDM) solutions

B. Using cloud storage without any encryption

C. Enforcing data encryption policies for all mobile devices

D. Allowing unrestricted access to corporate networks from mobile devices

Correct Answer: A,C

Question 3

Which of the following best describes host hardening in a Zero Trust Endpoint framework?
Response:

A. Increasing the number of end-user privileges

B. Installing multiple antivirus solutions on each host

C. Implementing strict access controls and reducing unnecessary functionalities on the host

D. Ensuring all endpoints are physically secure

Correct Answer: C

Question 4

Your organization has implemented a Zero Trust architecture to enhance network security. However, several systems are still relying on traditional perimeter defenses, which have become ineffective against advanced threats. To comply with the Zero Trust model, what immediate actions should your team prioritize to protect the organization's critical assets?
Response:

A. Implement micro-segmentation, enforce strong identity verification, and adopt the principle of least privilege

B. Disable all access to internal systems and require manual approvals for every request

C. Upgrade perimeter firewalls and focus on reducing network traffic

D. Decrease logging activities to focus on higher-priority events only

Correct Answer: A

Question 5

Which of the following is a best practice for endpoint patch management in a Zero Trust architecture?
Response:

A. Disabling automatic updates to prevent system conflicts

B. Delaying patch installation until user approval is received

C. Automating the patch management process to ensure timely updates

D. Applying patches manually to each endpoint

Correct Answer: C

Question 6

Which of the following is NOT a typical feature of Data Loss Prevention (DLP) solutions?
Response:

A. Data encryption

B. Content inspection

C. Decreasing storage use

D. Contextual analysis

Correct Answer: C

Question 7

Which of the following techniques is used to authenticate and encrypt endpoint traffic in Zero Trust Networking?
Response:

A. Single Packet Authentication

B. Red herring defenses

C. Domain Isolation

D. Transport Layer Security (TLS)

Correct Answer: D

Question 8

Which of the following is a common Layer 3 attack that exploits the routing table?
Response:

A. VLAN hopping

B. ARP cache poisoning

C. Man-in-the-middle attack

D. Route injection attack

Correct Answer: D

Welcome to TestSimulate

GIAC Defensible Security Architect (GDSA) Free Practice Test