GIAC Foundational Cybersecurity Technologies Practice Test 2026 - Free Cybersecurity Practice Questions and Study Guide – All Questions

Browse all practice questions for the GIAC Foundational Cybersecurity Technologies Practice Test. Search by topic, open any question and review its full explanation, then test yourself in the practice quiz.

Start practice test Flash cards

Mastering Output Redirection in Linux: A Key to Cybersecurity Solutions Which of the following commands is used to redirect output in Linux? Understanding the Role of Firewalls in Capturing HTTP Network TrafficWhich of the following is a likely source of logs for HTTP network traffic data?Accessing Hidden Shares in Windows: What Does It Mean?An administrator types the following command: \\fileserver2\network_tools\software$ What are they trying to access?Bypassing UAC: A Simple Guide for UsersWhat is considered the easiest way to bypass UAC (User Access Control)?Captchas and Web Scanners: The Endless Loop ExplainedWhat effect might a captcha have on a scanner?Cracking the Code: Discover What You Need for Data DecryptionWhat three things do you need to decrypt data?Cracking the Code: How Encryption Works and How It Can Be BrokenWhat are the two primary methods to break encryption?Cracking the Code: Understanding SUID in CybersecurityWhat file attribute is the penetration tester looking to find using the command below? find / -perm -4000 -user root -type f -print 2>/dev/null Defend Your Web Server: Clickjacking Mitigation Made SimpleHow can a web server mitigate clickjacking attacks?Exploring Cybersecurity with Nmap: The Essential Tool for Network AuditingWhich tool is commonly used for network exploration and security auditing?Guarding Against CSRF: Why a Token Is Your Best BetWhich of the following is an effective way to mitigate a Cross Site Request Forgery?Hashing Algorithms: The Backbone of Data IntegrityWhat is the primary function of a hashing algorithm?How Prepared Statements Defend Against SQL Injection AttacksHow do prepared statements help prevent SQL injection attacks?How Random Session Tokens Can Prevent Cyber AttacksWhich method is most effective in mitigating a Session Guessing attack?How to Check Symmetric and Asymmetric Encryption: Insights You NeedWhat is a method to check the symmetric or asymmetric encryption?How to Secure Your Apache Server: Disabling Version Information LeakageWhat can an Apache server administrator do to prevent version information from leaking?Mastering Cross-Site Scripting: Your Key to Cybersecurity SuccessWhich method is effective in mitigating a Cross Site Scripting Attack?Mastering CSRF Protection: Where to Place Your Tokens for Maximum SecurityWhere should CSRF tokens be placed to ensure security?Mastering Directory Commands in Linux: Your Essential GuideWhich command allows a user to list the contents of a directory in Linux?Mastering Directory Navigation: The Key Command You NeedWhich command changes your directory to the current home folder?Mastering Directory Traversal: Your Frontline DefenseWhat is the best way to defend against a Directory Traversal attack?Mastering File Inclusion Attack Mitigation in CybersecurityWhat is the best way to mitigate a file inclusion attack?Mastering Integer Overflow: Your Key to Cybersecurity SuccessWhat is the only way to mitigate an integer overflow/underflow?Mastering Linux Environment Variables: Key Command to KnowWhich command is used to set or modify an environment variable in Linux?Mastering Metasploit: The Essential Tool for Cybersecurity ProfessionalsWhat is Metasploit primarily used for?Mastering Password Security: Why Hashing is KeyWhat is a common method for securing passwords in storage?Mastering Privilege Escalation Techniques in CybersecurityWhat are some of the ways to perform privilege escalation?Mastering Privileged Command Execution with sudoWhich command allows a user to execute a command with escalated privileges using their password?Mastering SQL Injection: Safeguarding Your Backend DatabaseWhat does SQL injection attack exploit to send unauthorized commands?Mastering Symmetric Encryption: Scenarios and BenefitsIn what scenario is symmetric encryption most effective?Mastering the cp Command for Efficient File Management in LinuxWhat command is used to copy files in a Linux environment?Mastering the Essentials of the robots.txt File in SEOWhich file, located at the root of a website, contains URLs that should not be indexed by search engine spiders?Mitigating SQL Injection Attacks: Your Go-To GuideWhat is a recommended way to mitigate SQL injection attacks?Navigating the Waters of CSRF VulnerabilitiesWhat makes a web application particularly vulnerable to CSRF?Nmap: The Go-To Tool for Operating System FingerprintingWhat tool can be used to fingerprint the operating system of a host?The Art of Deception: Understanding Social Engineering in CybersecurityWhat is Social Engineering?The Critical Importance of Patching Known Vulnerabilities in CybersecurityWhat could potentially happen if known vulnerabilities are not patched?The Dangers of Dynamically Adding Files: Understanding Security RisksWhy is dynamically adding files based on user input considered a security risk?The Essential Role of Firewalls in Network SecurityWhat role does a firewall play in network security?The Essential Role of Vulnerability Scanners in CybersecurityWhat tool is commonly used to test web applications for vulnerabilities?The Importance of HTTPS in CybersecurityWhich protocol is commonly used for secure data transmission over the internet?The Importance of Patch Cycles in CybersecurityWhy are patch cycles important for organizations?The Importance of Regular Software Updates for CybersecurityWhat is the main benefit of regular software updates?The Importance of User Input Sanitization in Web SecurityWhat role does user input sanitization play in web security?The Key Role of Random Access Memory in GDB OutputsWhere is the data from a GDB output typically stored on the host?The Key to Identifying Unauthorized Access: An Insightful LookWhich approach is most effective for identifying unauthorized access in a system?The Key to Securing Your Code: Managing Format String VulnerabilitiesWhat is the recommended practice to mitigate a Format String Vulnerability?The Security Risks of FTP: Understanding Buffer Overflow VulnerabilitiesWhat kind of vulnerability is commonly associated with FTP services?The Ultimate Defense Against Command Injection VulnerabilitiesWhat is the best mitigation strategy for command injections?The Vital Role of DNS in Cybersecurity and NetworkingWhat is the primary function of DNS in a network?Timing Matters: When to Disclose Website VulnerabilitiesWhen is it appropriate to go public with a vulnerability found on a business website?Understanding Address Space Layout Randomization: A Key to CybersecurityWhat is the purpose of Address Space Layout Randomization (ASLR)?Understanding Apache Configuration Files: What You Need to KnowWhich file extension typically indicates a configuration file for Apache web server settings?Understanding Asymmetric Encryption: A Key to CybersecurityWhat characterizes Asymmetric encryption?Understanding Backtrace in Cybersecurity DebuggingWhat do the items in pwbdbg's backtrace indicate?Understanding Buffer Overflow Protection: The Role of Canary ValuesWhich mitigation technique places a value before the return pointer in the stack for buffer overflow protection?Understanding Buffer Overflows: Risks and ProtectionsWhich is true regarding buffer overflows?Understanding CEO Fraud: The Dangers of Impersonation in CybersecurityWhat is "CEO Fraud"? How does it work?Understanding Clickjacking: A Deep Dive into Cybersecurity RisksWhat is a clickjacking attack?Understanding Command Injection Attacks in Web ApplicationsWhat type of attack involves injecting commands through a web application?Understanding Command Injection: The Cybersecurity Flaw You Need to KnowWhat defines a command injection?Understanding Comments in Python: The Hash Symbol UncoveredIn Python, which symbol indicates the text after it is a comment?Understanding Credential Harvesting Attacks: Protect Your Digital IdentityWhat is a Credential Harvesting Attack?Understanding Credential Stuffing: The Mechanics Behind Account Enumeration AttacksWhat attack does the command indicated below attempt?Understanding Cross Site Scripting Attacks in CybersecurityWhat type of attack targets users that are browsing a site by exploiting client-side scripts?Understanding Cross-Site Request Forgery (CSRF) AttacksWhat is a requirement for cross-site request forgery (CSRF) to work?Understanding Cross-Site Request Forgery: A Crucial Cybersecurity ConceptA web application is configured to validate a unique token value for each submitted user request. What threat is being mitigated?Understanding Cross-Site Scripting: The Threat Lurking in Your Web PagesWhat type of vulnerability is illustrated where there is code in the web page?Understanding Data Exfiltration Through ICMP Echo RequestsWhich packet header field is a strong indicator of data exfiltration?Understanding DDoS Attacks and Their Impact on AvailabilityWhich of the following risk areas are targeted by DDoS attacks?Understanding Debugging with Pwndbg: Stepping Over vs. Stepping Into FunctionsWhen debugging an executable with pwndbg, what happens when a function named function_A is stepped over, instead of into?Understanding Denial-of-Service Attacks and Their ImpactWhich type of attack involves overwhelming a target with traffic to make it unavailable?Understanding DHCP: The Key to Automatic IP Address AssignmentWhat protocol is this computer set to use to obtain an IP Address?Understanding Directory Traversal Attacks and Their ConsequencesWhat could occur as a result of a successful Directory Traversal attack?Understanding Directory Traversal Attacks in CybersecurityWhat is the purpose of a Directory Traversal attack?Understanding Directory Traversal Attacks: A Cybersecurity Deep DiveWhat is a primary characteristic of a Directory Traversal attack?Understanding Docker Commands: The Key to Local Image ManagementWhat command is used to list locally stored images in Docker?Understanding Docker Daemon: The Heart of Container ManagementWhich component of Docker builds, runs, and delivers containers?Understanding Drive By Download Attacks in CybersecurityWhat is a Drive By Download attack?Understanding Encryption in HTTPS: The Dual Approach to Online SecurityWhich form of encryption does HTTPS utilize?Understanding Encryption vs. Encoding: What's the Difference?What distinguishes encryption from encoding?Understanding Encryption: More Than Just a BuzzwordWhich of the following best describes encryption?Understanding Encryption: The Key to Data SecurityWhat is encryption?Understanding Encryption: The Key to Data SecurityWhat is the primary purpose of encryption?Understanding End of Support: What It Means for Your ApplicationsWhat does it mean when an application reaches its end of support?Understanding File Inclusion Attacks in CybersecurityWhat does a file inclusion attack result from?Understanding File Permissions: The Parent Folder Inheritance ExplainedWhat permissions are inherited when a new file is created?Understanding File Upload Vulnerabilities: A Must-Know for Cybersecurity StudentsWhat describes a File Upload Vulnerability?Understanding Firewalls: The Backbone of Network SecurityWhich of the following best describes the purpose of a firewall?Understanding Format String Vulnerabilities in CybersecurityWhat defines a Format String Vulnerability?Understanding Git Commits: Your Key to Mastering Version ControlWhat is it called when a user makes a change to the master code in a Git repository?Understanding Hashing: The Guardian of Data IntegrityWhat is a form of one-way encryption commonly used in data integrity?Understanding HTTPS: Your Key to Secure Online CommunicationWhich protocol is used for secure communication over a computer network?Understanding IMAP and Its Role in Email AccessWhat protocol is commonly used to access email on a server?Understanding Integer Overflow in Cybersecurity ContextsIn which scenario does integer overflow most likely occur?Understanding Integer Overflow Vulnerabilities in CybersecurityWhich of the following can lead to Integer Overflow vulnerabilities?Understanding Integer Overflow: A Programmer's PitfallWhat issue does Integer Overflow often present in programming?Understanding Kernel-Level Malware: The Hidden ThreatsIf malicious software (malware) infects a computer, at which level does it require the most effort to detect and remove?Understanding Linux Logging: Where to Find Your System LogsIn which directory are Linux logs typically found?Understanding Linux Permissions: The Key to File ControlWhich of the following Linux permissions would allow the owner of a file to read, write, and execute a file while allowing everyone else to read and execute?Understanding Linux Runlevels: Your Guide to Operating Systems ModesIn Linux which command will show the mode that the operating system is currently running under?Understanding Malware: What Isn't It?Which of the following is not a type of malware?Understanding Man-in-the-Middle Attacks in CybersecurityWhich type of attack involves intercepting the communication between two parties?Understanding Metadata: Your Key to File Identification in CybersecurityWhat type of artifact can a blue team member use to identify the name associated with a file?Understanding Multi-Threaded Programs: What You Need to KnowWhat does it mean when a computer program is "multi-threaded"?Understanding Nmap Commands: A Deep Dive into Red Teaming TechniquesA Red Team would use the following command for which purpose? # nmap -vv -sS -p- 10.10.1.1 Understanding Permissions Issues on Apache Web ServersWhich of the following can cause a permissions issue on an Apache web server?Understanding Phishing in Cybersecurity: What You Need to KnowIn a cybersecurity context, what does the term "phishing" refer to?Understanding Phishing Targets: Why Your Legal, HR, and Accounting Teams are Under SiegeWhere do phishing attacks normally strike the most?Understanding Phishing: A Cybersecurity Threat to Watch ForWhat is Phishing?Understanding Pretexting: A Key Cybersecurity ConceptWhat is Pretexting?Understanding Privilege Escalation in CybersecurityWhat is Privilege Escalation?Understanding Privilege Escalation in CybersecurityWhich of the following services would be a target for privilege escalation?Understanding Pull Requests in Code ManagementCode management platforms use pull requests for which purpose?Understanding Python Commands on Linux SystemsIf you run the command "Python" on a Linux system, what will happen?Understanding Python Dictionaries: What You Need to KnowIn Python, what type of structure is `cast_list` if it is defined with curly braces?Understanding Python List Indexing: A Focus on "Oregon"Which statement will display "Oregon" from the PNW_states list?Understanding Reflected Cross-Site Scripting Attacks in CybersecurityWhich of the following is a common result of a reflected cross-site scripting attack?Understanding Remote Code Execution and Its Impacts on CybersecurityWhich type of attack is characterized by manipulating vulnerable code that uses untrusted data?Understanding Remote Code Execution VulnerabilitiesWhat type of exploit allows an attacker to execute arbitrary code remotely, as described in CVE-2019-9874?Understanding Reverse DNS Lookup Times in Network ScansWhat is indicated by an increasing reverse DNS lookup time during a network scan?Understanding Secure Hashing Algorithms for CybersecurityWhich of the following is considered a secure hashing algorithm?Understanding Session Tokens in Web Application SecurityIn the context of web application security, what does the term "session token" refer to?Understanding SFTP: The Secure Choice for Data TransmissionWhich protocol is commonly used for securely transmitting data over a network?Understanding SGID: A Key File Attribute for Cybersecurity ProficiencyWhat file attribute is the penetration tester looking to find using the command below? find / -per -2000 -user root -type f -print 2>/dev/null Understanding Software Interrupts in Microsoft WordWhat occurs when the user clicks File | Open in Microsoft Word?Understanding Spear Phishing: The Targeted Cyber ThreatWhat is Spear Phishing?Understanding Stack Canaries and Their Role in CybersecurityWhat does a stack canary protect in a stack?Understanding Strong Encryption: Demystifying Key ConceptsWhat makes an encryption strong?Understanding Symmetric Encryption: A Key to Secure CommunicationWhat is Symmetric Encryption?Understanding Symmetric Encryption: The Key to Data SecurityWhat type of encryption uses the same key for both encryption and decryption?Understanding System Privileges on Windows: The Power of the SYSTEM AccountWhat is the highest level of privileges on a Windows machine?Understanding TCP Handshake and Acknowledgment BytesIn both the TCP handshake and teardown, how much data is being sent when the ACK number increases by one?Understanding TCP Teardown: RST Packets ExplainedWhich packet type is used when a graceful TCP Teardown fails?Understanding the 'docker ps' Command: A Vital Tool for Cybersecurity StudentsWhat is the function of the command 'docker ps'?Understanding the Core Function of Firewalls in CybersecurityWhat does a firewall primarily do?Understanding the HEAD HTTP Request: A Quick Dive into Metadata RetrievalWhat HTTP protocol request retrieves metadata without the data?Understanding the Hypervisor: Your Key to Virtualization in CybersecurityWhat is the software or firmware platform that hosts a virtual machine called?Understanding the Importance of the ./configure Command in Cybersecurity PracticesWhich command generates a makefile tailored to the installed system?Understanding the Intent Behind Attacker ReconnaissanceAn alert indicates that a compromised host was used by an attacker to run a network scanning command such as nmap -sV or netstat -an. What was the attacker attempting to do?Understanding the Key Components of Data EncryptionIn order to encrypt data, what three components are necessary?Understanding the Key Differences Between "sudo" and "su" in LinuxWhat is the difference between "sudo" and "su"?Understanding the Lessons Learned Phase in Incident ResponseAt which stage of incident response is the adequacy of policies reviewed?Understanding the Power of Encryption in CybersecurityWhat does encryption provide?Understanding the Risks of Using Unsupported ApplicationsWhat is a common consequence of using applications that are no longer supported?Understanding the Role of a VPN in CybersecurityWhat is the primary function of a VPN?Understanding the Role of Hashing Algorithms in CybersecurityWhat is a hashing algorithm?Understanding the Role of HKEY_LOCAL_MACHINE in WindowsWhat is HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run considered to be?Understanding the Role of Methods in Object-Oriented ProgrammingWhich of the following is the name given to the behaviors that objects have in object-oriented programming?Understanding the Role of Return Pointers in Computer SystemsWhat is the return pointer in a computer system?Understanding the Role of SSL Certificates in HTTPS EncryptionWhat feature of HTTPS encryption solves the trust problem in the asymmetric key exchange?Understanding the Role of SSL in CybersecurityWhat is the purpose of a secure socket layer (SSL)?Understanding the Role of Tokens in Web Application SecurityIn the context of web application security, what role do tokens play?Understanding the Role of User Agents in HTTP ProtocolIf the user agent is used, where would it be found in the HTTP protocol?Understanding the Sysprep Directory in Windows InstallationsWhich C:\Windows\System32 subdirectory may provide stored credentials from unattended installs?Understanding the Unique Nature of Phishing in CybersecurityWhat distinguishes phishing from other types of social engineering attacks?Understanding the Vital Role of Firewalls in Network SecurityWhat is the purpose of a firewall in a network?Understanding the Windows Registry: Your Guide to Foundational Cybersecurity TechnologiesWhich of the following is a Windows Database of settings for both the operating system and applications?Understanding the X-Frame Options Header for CybersecurityWhat are the values that can be set in the X-Frame Options header?Understanding the X-Frame Options Header: A Key to Web SecurityWhich of the following describes the purpose of the X-Frame Options header?Understanding Time-Based Attacks in CybersecurityWhich type of attack exploits timer vulnerabilities in online systems?Understanding Token Validation in CybersecurityIn a web application configured to validate a unique token value for each submitted user request, which threat is being mitigated?Understanding User Access Control in CybersecurityWhat does the acronym UAC stand for in cybersecurity?Understanding User Account Control (UAC) and Its Role in Windows SecurityHow does the default setting for User Account Control improve Windows Security?Understanding User Account Control Settings in WindowsWhat is one of the four User Account Control (UAC) settings on a Windows system?Understanding User Agents in HTTP RequestsIf a user agent is used, where would it be found in the HTTP Protocol?Understanding User Privileges in Unix-Like Operating SystemsWhich command is typically used to change user privileges in Unix-like operating systems?Understanding Wild Card Injection: A Crucial Component of CybersecurityWhat is a Wild Card injection?Understanding Word Macros: A Double-Edged Sword in CybersecurityWhat is a word macro?Understanding X-Frame-Options: A Key Defense Against ClickjackingA GIAC administrator has configured their company's web server with X-Frame-Options. What attack is being addressed?Understanding Your Home Folder: A Key Part of Cybersecurity BasicsWhat does the home folder contain?Unlocking the Mystery of Clickjacking: What You Need to KnowWhich attack type allows an attacker to gain access by tricking users into clicking on specific parts of a page?Unmasking Social Engineering: The Power of Psychological ManipulationWhat is a common characteristic of social engineering attacks?Unpacking Cross Site Request Forgery: What You Need to KnowWhat does a Cross Site Request Forgery primarily involve?What You Need to Know About robots.txt for Your WebsiteWhat is the name of the file that instructs search engines to avoid certain locations on a website?What You Need to Know About Session Guessing AttacksWhat is a Session Guessing attack?Why Asymmetric Encryption is Essential for Secure CommunicationsWhat characteristic makes asymmetric encryption advantageous for secure communications?Why Kali Linux is the Go-To OS for Metasploit UsersWhich operating system is most commonly associated with running Metasploit?Why Log Servers are Game Changers in CybersecurityWhat benefit does moving from local logging to using a log server provide organizations?Why Strict File Type Validation is Your Best Friend in CybersecurityWhich security method can reduce risks associated with file uploads?Why Understanding pwndbg Commands is Essential for Cybersecurity StudentsWhen debugging a program with pwndbg, what is the significance of the 's' in the command x/s 0x80484ef?

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy