GIAC GDSA Actual Free Exam Questions & Community Discussion

Exam Code/Number: GDSA
Exam Name/Title: GIAC Defensible Security Architect
Certification Provider: GIAC
Corresponding Certification: GIAC Cyber Defense

Exam Questions: 184
Updated On: May 29, 2026

Question #76

Select all applicable: Principles of Zero Trust Architecture.
Response:

A. Utilize network segmentation and microsegmentation to control access

B. Implement strict access control and least privilege

C. Trust levels remain constant and are based on the asset location

D. Assume breach and verify each request as if it originates from an open network

Discussion 0

Correct Answer: A,B,D Vote an answer

Question #77

What are the purposes of using a sandbox in network defense?
Response:

A. Testing untrusted programs

B. Analyzing malware behavior

C. Enhancing user experience

D. Storing sensitive information

Discussion 0

Correct Answer: A,B Vote an answer

Question #78

Why are proactive defenses important in shaping attacker behaviors in Zero Trust Networking?
Response:

A. They solely rely on passive detection mechanisms

B. They focus on strengthening perimeter defenses only

C. They aim to preemptively disrupt and deter attack tactics

D. They encourage attackers to use more predictable strategies

Discussion 0

Correct Answer: C Vote an answer

Question #79

Encryption in network security serves to:
Response:

A. Slow down the network.

B. Replace the need for a firewall.

C. Prevent unauthorized data manipulation and eavesdropping.

D. Increase the network's latency.

Discussion 0

Correct Answer: C Vote an answer

Question #80

Which of the following is a core benefit of using Network Intrusion Prevention Systems (NIPS)?
Response:

A. They primarily focus on outbound traffic.

B. They can replace the need for traditional firewalls.

C. They are primarily used for data recovery.

D. They can take direct action to block or prevent malicious activity.

Discussion 0

Correct Answer: D Vote an answer

Question #81

Your company is facing increased phishing attempts through email attachments. The security team has decided to implement an SMTP proxy to improve email security. What are the key benefits of deploying an SMTP proxy, and how should it be configured to block malicious content?
Response:

A. The SMTP proxy will encrypt all incoming emails and block any that are not encrypted

B. The SMTP proxy will focus on blocking all outbound email traffic to prevent data loss

C. The SMTP proxy will prevent users from accessing external websites while they are receiving emails

D. The SMTP proxy will filter email attachments and block suspicious content; it should be configured to scan attachments for malware and enforce policies on acceptable attachment types

Discussion 0

Correct Answer: D Vote an answer

Question #82

How does a SMTP proxy enhance email security?
Response:

A. By performing full disk encryption for email servers

B. By blocking all outbound email traffic

C. By filtering email content to detect and block spam or malicious attachments

D. By monitoring internal network traffic

Discussion 0

Correct Answer: C Vote an answer

Question #83

In the context of data mobility management, what is a major concern?
Response:

A. Data loss or leakage prevention when data is accessed or transmitted across devices

B. Encouraging users to store data only on stationary devices

C. Decreasing the size of data

D. Ensuring data is never accessed by mobile devices

Discussion 0

Correct Answer: A Vote an answer

Question #84

In a Zero Trust Networking model, what is the primary role of Single Packet Authentication (SPA)?
Response:

A. Verifying and authenticating a device before allowing network access

B. Encrypting data at rest

C. Monitoring user behavior across the network

D. Reducing the number of available IP addresses

Discussion 0

Correct Answer: A Vote an answer

Question #85

What role does sandboxing play in network defense?
Response:

A. It provides additional bandwidth.

B. It isolates potentially malicious programs to observe their behavior.

C. It increases the network speed.

D. It reduces the need for encryption.

Discussion 0

Correct Answer: B Vote an answer

Question #86

When securing network protocols like SNMP and NTP, it is crucial to:
Response:

A. Apply strong authentication and encryption

B. Ensure they are unmonitored

C. Utilize the least secure versions

D. Configure them with public access

Discussion 0

Correct Answer: A Vote an answer

Question #87

Which of the following techniques focuses on restricting network communication to verified entities only?
Response:

A. Transport Layer Security (TLS)

B. Single Packet Authentication

C. Domain Isolation

D. Red herring defenses

Discussion 0

Correct Answer: C Vote an answer

Question #88

What is a key benefit of micro-segmentation in a security architecture?
Response:

A. It ensures encryption for all network traffic

B. It increases network performance

C. It prevents Distributed Denial of Service (DDoS) attacks

D. It reduces the attack surface by dividing the network into smaller, secure zones

Discussion 0

Correct Answer: D Vote an answer

Question #89

Which of the following are considered essential features of cloud-based security architecture?
(Select all that apply)
Response:

A. Encryption of data at rest and in transit

B. Distributed Denial of Service (DDoS) mitigation

C. Identity and access management (IAM)

D. Physical security measures

Discussion 0

Correct Answer: A,B,C Vote an answer

Question #90

What is the purpose of Domain Isolation in Zero Trust Networking?
Response:

A. To prevent communication between different domains

B. To allow unrestricted communication between all domains

C. To confuse attackers with red herring defenses

D. To authenticate and encrypt endpoint traffic

Discussion 0

Correct Answer: A Vote an answer

Download Free GIAC GDSA Demo

Simply submit your e-mail address below to get started with our free demo of your GIAC GDSA exam.