[NEW] GIAC Defensible Security Architect (GDSA)

Fundamental Layer 3 Defense (15%): Deep dives into CIDR, routing attack mitigations, Bogon filtering, and securing core protocols like SNMP and NTP.

Cloud-based Security Architecture (20%): Securing hypervisors, managing network segmentation in the cloud, and implementing the Shared Responsibility Model across IaaS, PaaS, and SaaS.

Data Discovery, Governance, and Mobility Management (15%): Implementing effective File Classification, Data Loss Prevention (DLP), and robust Mobile Device Management (MDM) strategies.

Data-Centric Security (30%): Deploying Reverse Proxies, Web Application Firewalls (WAF), Database Activity Monitoring, and sophisticated Encryption Key Management.

B. Presumption of Compromise and continuous verification of every request.

C. Allowing access if the user is within the corporate IP range.

D. Granting full administrative rights to simplify the workflow.

E. Disabling the firewall for that specific session.

F. Trusting the device because it has a valid MAC address.

Correct Answer: B

Explanation:

A (Incorrect): MFA is a component, but implicit trust is the opposite of Zero Trust principles.

C (Incorrect): Location-based trust (the "moat and castle" model) is what Zero Trust specifically seeks to replace.

D (Incorrect): This violates the principle of Least Privilege.

E (Incorrect): Disabling security controls increases risk and is never a Zero Trust recommendation.

F (Incorrect): MAC addresses are easily spoofed and do not constitute a secure identity or health check.

Question 2: Which cloud security concept defines the division of security tasks between the service provider (e.g., AWS or Azure) and the organization using the service?

B. Containerization Pattern

C. Shared Responsibility Model

D. Hypervisor Isolation

E. Software Defined Perimeter

F. Data Mobility Control

Correct Answer: C

Explanation:

A, B, D (Incorrect): These are technical components or technologies used within the cloud, not the governance model itself.

E (Incorrect): This is a security framework for controlling access, not a responsibility agreement.

F (Incorrect): This refers to how data moves between environments, not who is responsible for securing the underlying infrastructure.

Question 3: A security architect is deploying a free build 8 python apps games and web application python master course Firewall (WAF) to protect a critical database. Which type of security control does this primarily represent?

B. Physical Security Control

C. Data-Centric Security

D. Layer 2 Switching Logic

E. Post-incident Forensic Analysis

F. Administrative Policy Management

Correct Answer: C

Explanation:

A (Incorrect): While it sits on a network, a WAF's primary function is application/data-layer inspection, not simple Layer 3 routing or port blocking.

B (Incorrect): WAFs are software or virtual appliances, not physical barriers like locks or cameras.

D (Incorrect): WAFs operate at Layer 7 (Application), not Layer 2 (Data Link).

E (Incorrect): WAFs are primarily used for real-time prevention and detection, not retrospective forensics.

F (Incorrect): This is a technical (logical) control, not an administrative one like a document or policy.

You can retake the exams as many times as you want.

This is a huge original question bank.

You get support from instructors if you have questions.

Each question has a detailed explanation.

Mobile-compatible with the Udemy app.

30-days money-back guarantee if you're not satisfied.