10 exam-style questions with answers and explanations, straight from our 1,036-question bank. Tap an answer to check yourself. When you're ready, take the scored version in the free practice test.
The GSLC exam has 115 questions and runs 3 hours.
These 10 free GSLC questions are organized by exam domain, so you can see how each part of the GIAC Security Leadership blueprint is tested. Reveal the answer and explanation under each question.
During a policy review, a manager notes that one document recommends-but does not require-that staff enable a password manager. Within the security documentation hierarchy, this document is BEST classified as a:
Correct answer: C - Guideline, because it is advisory rather than mandatory
An asset is valued at $80,000. A particular threat is expected to destroy 25% of the asset's value each time it occurs, and analysts estimate it will occur twice per year. What is the Annualized Loss Expectancy (ALE)?
Correct answer: C - $40,000
A dispute arises over who may approve the classification level of a sensitive customer database. According to standard data governance roles, who is ACCOUNTABLE for assigning that classification?
Correct answer: B - The data owner, who holds business accountability for the information asset and its classification
A security architect is redesigning network access so that no user or device is trusted merely because it sits inside the corporate network; every request must be authenticated and authorized. Which model BEST describes this approach?
Correct answer: C - Zero Trust, applying 'never trust, always verify' regardless of location
Security operations reports that a piece of malware spread across hundreds of hosts overnight without any user opening a file or clicking a link. This self-propagating behavior is MOST characteristic of a:
Correct answer: A - Worm
An organization runs virtual machines on an Infrastructure-as-a-Service (IaaS) platform. Under the cloud shared responsibility model, who is responsible for securing the DATA and the guest operating system stored on those VMs?
Correct answer: A - The customer, since IaaS leaves the OS and data to the customer
A manager wants to send a partner a file so that ONLY that partner can decrypt it. Using asymmetric cryptography, which key should be used to encrypt the file?
Correct answer: D - The recipient's public key
A vulnerability report lists an identifier of 'CVE-2024-XXXXX' alongside a numeric rating of 9.8. What does that numeric 9.8 rating represent?
Correct answer: B - The CVSS score expressing the severity of the vulnerability
A SOC already aggregates and correlates log data to generate alerts, but analysts are overwhelmed manually executing the same containment steps for every phishing alert. Which technology is specifically designed to AUTOMATE that repeatable response through playbooks?
Correct answer: D - A SOAR platform that runs the response steps automatically
A business unit tells the security leader it can tolerate losing at most 15 minutes of transaction data if a system fails. This 15-minute figure defines which business continuity metric?
Correct answer: B - Recovery Point Objective (RPO)
The GSLC exam also covers these domains. Drill them in the full free practice test:
The full bank has 1,026 more GSLC questions with explanations.
Continue in the free practice test →
View plans