[NEW] GIAC Foundational Cybersecurity Technologies (GFACT)

Operating Systems (15%): Understanding Windows and Linux fundamentals, including file systems and core OS security features.

Networking (20%): Deep diving into the TCP/IP and OSI models, network protocols, subnets, and the function of firewalls and routers.

Security Tools & Techniques (20%): Learning the practical application of IDS/IPS, vulnerability scanners, and SIEM for log analysis.

Cryptography (15%): Mastering the differences between symmetric and asymmetric encryption, hashing, and the Public Key Infrastructure (PKI).

Incident Response (10%): Understanding the incident lifecycle, from evidence collection to containment and reporting.

B. Platform as a Service (PaaS)

C. Infrastructure as a Service (IaaS)

D. Desktop as a Service (DaaS)

E. Function as a Service (FaaS)

F. Security as a Service (SECaaS)

Correct Answer: C

Explanation:

A (Incorrect): In SaaS, the provider manages everything; the user only accesses the software.

B (Incorrect): In PaaS, the provider manages the OS and runtime; the user only manages applications and data.

D, E, F (Incorrect): These models abstract away the underlying infrastructure even further than IaaS does.

Question 2: In the OSI model, which layer is responsible for determining the best physical path for data to travel from a source to a destination using IP addresses?

B. Layer 2 - Data Link Layer

C. Layer 3 - Network Layer

D. Layer 4 - Transport Layer

E. Layer 5 - Session Layer

F. Layer 7 - Application Layer

Correct Answer: C

Explanation:

A (Incorrect): Layer 1 deals with the physical transmission of bits via cables or radio waves.

B (Incorrect): Layer 2 uses MAC addresses for local delivery on a single segment.

D (Incorrect): Layer 4 focuses on end-to-end communication and error recovery (TCP/UDP).

E, F (Incorrect): These layers deal with session management and user-facing applications, not routing.

Question 3: Which cryptographic concept ensures that a message has not been altered during transit, providing data integrity?

B. Asymmetric Encryption

C. Hashing

D. Key Escrow

E. Steganography

F. Salting

Correct Answer: C

Explanation:

A & B (Incorrect): Encryption is primarily used for confidentiality (hiding data), not solely for integrity.

D (Incorrect): Key escrow is a practice of storing keys with a third party.

E (Incorrect): Steganography is the art of hiding a message inside another file.

F (Incorrect): Salting is a technique used to strengthen password hashes against rainbow table attacks.

You can retake the exams as many times as you want

This is a huge original question bank

You get support from instructors if you have questions

Each question has a detailed explanation

Mobile-compatible with the Udemy app

30-days money-back guarantee if you're not satisfied