CertsPoint
Sign In Get Started
See all results for ""
Exams About Us
Sign In Get Started
Exam Overview
Exam Code GSLC
Exam Name GIAC Security Leadership
Vendor GIAC
Total Questions 567
Last Updated 26-Oct, 2026
Free GSLC Questions Get Premium Access
Why CertsPoint?
  • Latest & Verified Questions
  • Detailed Explanations
  • Regular Updates
  • Full-Length Practice Tests
  • Boost Your Exam Confidence

PDF Study Materials

Downloadable guides and resources

Practice Tests

Full-length tests with real exam experience

Progress Tracking

Monitor your performance and improvement

Study Anywhere

Access on desktop, tablet, and mobile

Excellent
4.6 (398 Up Votes)
Secure Payment Privacy Protected Money Back Guarantee

Free GSLC Practice Questions

Explore 10 free practice questions for the GIAC GSLC exam and review the answers and explanations to support your preparation.

  1. Question 1

    Single answer

    You are responsible for network security at a defense contractor. You are very concerned about sensitive data not getting out of your network. You have specific concerns about employees or contractors sending out files via FTP, or even spyware sending out data. You have blocked and monitored ports (as many as you can) on your firewall, and of course, run an anti spyware package.


    Which of the following is another step you should take in preventing sensitive data from being sent out of your network without authorization?

    • Option A:

      Implement an IDS.

      Correct
    • Option B:

      Utilize a DMZ firewall.

      Correct
    • Option C:

      Block all employees from emailing outside your network.

      Correct
    • Option D:

      Employ network wide anti virus.

      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: A

  2. Question 2

    Multiple answers

    Which of the following can be used as a countermeasure against the SQL injection attack?


    Each correct answer represents a complete solution. Choose two.

    • Option A:

      mysql_escape_string()

      Correct
    • Option B:

      session_regenerate_id()

      Correct
    • Option C:

      mysql_real_escape_string()

      Correct
    • Option D:

      Prepared statement

      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: C, D

  3. Question 3

    Single answer

    All of the following are the password cracking attacks performed by the cain tool except for which one?

    • Option A:

      Brute force attack

      Correct
    • Option B:

      Dictionary attack

      Correct
    • Option C:

      DoS attack

      Correct
    • Option D:

      Rainbow attack

      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: C

  4. Question 4

    Multiple answers

    Which of the following functions can you use to mitigate a command injection attack?

    Each correct answer represents a complete solution. Choose all that apply.

    • Option A:

      escapeshellcmd()

      Correct
    • Option B:

      escapeshellarg()

      Correct
    • Option C:

      htmlentities()

      Correct
    • Option D:

      strip_tags()

      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: A, B

  5. Question 5

    Single answer

    Every network device contains a unique built in Media Access Control (MAC) address, which is used to identify the authentic device to

    limit the network access. Which of the following addresses is a valid MAC address?

    • Option A:

      F936.28A1.5BCD.DEFA

      Correct
    • Option B:

      1011-0011-1010-1110-1100-0001

      Correct
    • Option C:

      132.298.1.23

      Correct
    • Option D:

      A3-07-B9-E3-BC-F9

      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: D

  6. Question 6

    Multiple answers

    Which of the following can be used as a countermeasure against the SQL injection attack?

    Each correct answer represents a complete solution. Choose two.

    • Option A:

      mysql_escape_string()


      Correct
    • Option B:

      session_regenerate_id()


      Correct
    • Option C:

      mysql_real_escape_string()


      Correct
    • Option D:

      Prepared statement

      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: C, D

  7. Question 7

    Single answer

    Which of the following contract types is described in the statement below?

    " This contract type provides no incentive for the contractor to control costs and hence is rarely utilized. "

    • Option A:

      Cost Plus Fixed Fee


      Correct
    • Option B:

      Cost Plus Award Fee


      Correct
    • Option C:

      Cost Plus Incentive Fee


      Correct
    • Option D:

      Cost Plus Percentage of Cost

      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: D

  8. Question 8

    Multiple answers

    Wired Equivalent Privacy (WEP) is a security protocol for wireless local area networks (WLANs). It has two components, authentication and encryption. It provides security equivalent to wired networks for wireless networks. WEP encrypts data on a wireless network by using a fixed secret key. Which of the following statements are true about WEP?

    Each correct answer represents a complete solution. Choose all that apply.

    • Option A:

      WEP uses the RC4 encryption algorithm.


      Correct
    • Option B:

      Automated tools such as AirSnort are available for discovering WEP keys.


      Correct
    • Option C:

      It provides better security than the Wi-Fi Protected Access protocol.


      Correct
    • Option D:

      The Initialization Vector (IV) field of WEP is only 24 bits long.

      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: A, B, D

  9. Question 9

    Single answer

    All of the following are the password cracking attacks performed by the cain tool except for which one?

    • Option A:

      Brute force attack


      Correct
    • Option B:

      Dictionary attack

      Correct
    • Option C:

      DoS attack

      Correct
    • Option D:

      Rainbow attack

      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: C

  10. Question 10

    Single answer

    In which of the following does a Web site store information such as user preferences to provide customized services to users?

    • Option A:

      Keyword


      Correct
    • Option B:

      Cookie


      Correct
    • Option C:

      Protocol


      Correct
    • Option D:

      ActiveX control

      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: B