CertsPoint
See all results for ""
Exams About Us
Sign In Get Started
Exam Overview
Exam Code GISF
Exam Name GIAC Information Security Fundamentals
Vendor GIAC
Total Questions 451
Last Updated 26-Oct, 2026
Why CertsPoint?
  • Latest & Verified Questions
  • Detailed Explanations
  • Regular Updates
  • Full-Length Practice Tests
  • Boost Your Exam Confidence

PDF Study Materials

Downloadable guides and resources

Practice Tests

Full-length tests with real exam experience

Progress Tracking

Monitor your performance and improvement

Study Anywhere

Access on desktop, tablet, and mobile

Excellent
4.6 (398 Up Votes)
Secure Payment Privacy Protected Money Back Guarantee

Free GISF Practice Questions

Explore 6 free practice questions for the GIAC GISF exam and review the answers and explanations to support your preparation.

  1. Question 1

    Single answer

    Which of the following is a valid IP address for class B Networks?

    • Option A:

      172.157.88.3

      Correct
    • Option B:

      80.33.5.7

      Correct
    • Option C:

      212.136.45.8

      Correct
    • Option D:

      225.128.98.7

      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: A

  2. Question 2

    Single answer

    You work as a Network Administrator for Infonet Inc. The company has a Windows Server 2008 domainbased network. The network has three Windows Server 2008 member servers and 150 Windows Vista client computers. According to the company's security policy, you apply Windows firewall setting to the computers on the network. Now, you are troubleshooting a connectivity problem that might be caused by Windows firewall. What will you do to identify connections that Windows firewall allows or blocks?

    • Option A:

      Configure Network address translation (NAT).

      Correct
    • Option B:

      Disable Windows firewall logging.

      Correct
    • Option C:

      Configure Internet Protocol Security (IPSec).

      Correct
    • Option D:

      Enable Windows firewall logging.

      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: D

  3. Question 3

    Single answer

    Which of the following techniques are used after a security breach and are intended to limit the extent of any damage caused by the incident?

    • Option A:

      Corrective controls

      Correct
    • Option B:

      Detective controls

      Correct
    • Option C:

      Safeguards

      Correct
    • Option D:

      Preventive controls

      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: A

  4. Question 4

    Single answer

    Your company is covered under a liability insurance policy, which provides various liability coverage for information security risks, including any physical damage of assets, hacking attacks, etc. Which of the following risk management techniques is your company using?

    • Option A:

      Risk acceptance

      Correct
    • Option B:

      Risk transfer

      Correct
    • Option C:

      Risk avoidance

      Correct
    • Option D:

      Risk mitigation

      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: B

  5. Question 5

    Single answer

    You are the security manager of Microliss Inc. Your enterprise uses a wireless network infrastructure with access points ranging 150-350 feet. The employees using the network complain that their passwords and important official information have been traced. You discover the following clues:

    The information has proved beneficial to another company.

    The other company is located about 340 feet away from your office.

    The other company is also using wireless network.

    The bandwidth of your network has degraded to a great extent.

    Which of the following methods of attack has been used?

    • Option A:

      A piggybacking attack has been performed.

      Correct
    • Option B:

      The information is traced using Bluebugging.

      Correct
    • Option C:

      A DOS attack has been performed.

      Correct
    • Option D:

      A worm has exported the information.

      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: A

  6. Question 6

    Multiple answers

    Which of the following statements about Encapsulating Security Payload (ESP) are true?

    Each correct answer represents a complete solution. Choose two.

    • Option A:

      It can also be nested with the Layer Two Tunneling Protocol (L2TP).

      Correct
    • Option B:

      It is an IPSec protocol.

      Correct
    • Option C:

      It is a text-based communication protocol.

      Correct
    • Option D:

      It uses TCP port 22 as the default port and operates at the application layer.

      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: A, B