Free GISP Practice Questions

Question 1

A data center is valued at $2,000,000. A flood study indicates a flood would destroy 20% of the facility's value, and such floods occur approximately once every 25 years. Management is evaluating a drainage system costing $12,000 per year that would eliminate the flood risk entirely. Based on quantitative risk analysis, the security professional should recommend:

Accepted Answer

Implementing the system, because its annual cost is less than the annualized loss expectancy of $16,000

Answer

Rejecting the system, because its annual cost exceeds the annualized loss expectancy of $16,000

Answer

Implementing the system, because the single loss expectancy of $400,000 far exceeds the annual cost

Answer

Rejecting the system, because a safeguard that eliminates risk entirely is never cost-justified

Question 2

A defense contractor must prevent a user holding a Secret clearance from writing information into a document labeled Confidential. Which security model property specifically enforces this restriction?

Accepted Answer

The * (Star) Property of the Bell-LaPadula model, which prohibits writing down

Answer

The Simple Security Property of the Bell-LaPadula model, which prohibits reading up

Answer

The * (Star) Integrity Axiom of the Biba model, which prohibits writing up

Answer

The Simple Integrity Axiom of the Biba model, which prohibits reading down

Question 3

A biometric system at a classified facility is being tuned. Management directs that the system must minimize the possibility of an unauthorized individual gaining entry, even if authorized personnel are occasionally turned away. To comply, the administrator should:

Accepted Answer

Raise the sensitivity, accepting a higher false rejection rate as the tradeoff

Answer

Lower the sensitivity, accepting a higher false acceptance rate

Answer

Configure the system to operate exactly at its crossover error rate

Answer

Replace the system with one having a higher crossover error rate

Question 4

An organization performs a full backup every Sunday and differential backups Monday through Saturday. The primary storage array fails on Thursday morning, before that day's backup has run. To fully restore the data, the administrator must restore:

Accepted Answer

Sunday's full backup, followed by Wednesday's differential backup only

Answer

Sunday's full backup, then Monday's, Tuesday's, and Wednesday's backups in order

Answer

Wednesday's backup alone, because it already contains every block changed that week

Answer

Sunday's full backup alone, because differentials do not clear the archive bit

Question 5

A development team wants users to sign in to their application using accounts from a major external identity provider. The lead engineer proposes treating a valid OAuth 2.0 access token as proof of the user's identity. A security architect should object because OAuth 2.0:

Accepted Answer

Is a delegated authorization framework and does not itself authenticate the end user

Answer

Cannot establish trust relationships across separate organizational security domains

Answer

Transmits its assertions in XML, which most modern web applications cannot parse

Answer

Requires both organizations to share a common Kerberos realm and key distribution center

Question 6

A network engineer builds a site-to-site VPN using IPsec with the Authentication Header (AH) protocol in tunnel mode. An auditor reviewing the design identifies a critical deficiency. The deficiency is that AH:

Accepted Answer

Does not encrypt the payload, so the tunneled data traverses the link in cleartext form

Answer

Cannot provide anti-replay protection, leaving the tunnel open to captured-packet reuse

Answer

Operates only in transport mode and therefore cannot protect gateway-to-gateway traffic

Answer

Relies on asymmetric cryptography for bulk data, making the tunnel too slow for production

Question 7

A security analyst confirms that a production server is actively compromised. The server holds volatile evidence that the legal department intends to use in a criminal prosecution. The analyst should FIRST:

Accepted Answer

Disconnect the server from the network while leaving it powered on and running

Answer

Shut the server down to halt the attacker's access and preserve the disk contents intact

Answer

Capture a bit-for-bit forensic image of the hard drive using a write blocker

Answer

Notify law enforcement so investigators can direct the evidence collection

Question 8

During a business impact analysis, a critical order-processing system is assigned a maximum tolerable downtime of 10 hours. Analysts determine that validating data integrity and resuming normal business operations after restoration will consume 4 hours. The recovery time objective for this system must be no greater than:

Accepted Answer

6 hours

Answer

4 hours

Answer

14 hours

Answer

10 hours

Question 9

Alice sends a contract to Bob. Bob must be able to prove to a third party that the contract genuinely originated from Alice and that Alice cannot later deny having sent it. To accomplish this, Alice must:

Accepted Answer

Encrypt the contract's hash value with her own private key, creating a signature

Answer

Encrypt the contract's hash value with Bob's public key so only Bob can validate it

Answer

Generate an HMAC of the contract using a symmetric key that she and Bob both hold

Answer

Encrypt the entire contract with Bob's public key and publish the hash separately

Question 10

A hospital is decommissioning solid-state drives that stored patient records. The drives will be donated to a local school. Which sanitization approach is appropriate?

Accepted Answer

Issue the manufacturer's built-in secure erase command and verify its completion

Answer

Degauss each drive using a certified magnetic field generator rated for the media

Answer

Perform a single-pass overwrite across every addressable block on each drive

Answer

Delete all partitions and perform a full format of each drive before donation

Free GISP Practice Questions

Domain 1: Conceptual Foundations 10% of exam

Question 1

Question 2

Domain 2: Geospatial Data Fundamentals 15% of exam

Question 3

Domain 3: Cartography and Visualization 10% of exam

Question 4

Question 5

Domain 4: Data Acquisition 11% of exam

Question 6

Domain 5: Data Manipulation 11% of exam

Question 7

Question 8

Domain 7: Database Design and Management 10% of exam

Question 9

Question 10

The rest of the GISP blueprint

That's 10 of 1,054