[NEW] GIAC Foundational Cybersecurity Technologies (GFACT)

Detailed Exam Domain Coverage

To ensure you are fully prepared, I have aligned these practice tests directly with the official GIAC Foundational Cybersecurity Technologies (GFACT) blueprint. The question bank covers the following domains and weights:

• Foundations of Computing (20%): Hardware components, architecture, virtualization concepts, cloud service models (IaaS, PaaS, SaaS), and basic scripting (Bash/PowerShell).

• Operating Systems (15%): Windows and Linux OS fundamentals, core OS security features, and file system concepts.

• Networking (20%): The TCP/IP model, OSI layers, common network protocols (HTTP, DNS, SMTP), network devices (routers, switches, firewalls), subnetting, and IP addressing.

• Security Tools & Techniques (20%): IDS/IPS basics, vulnerability scanning tools, log analysis, SIEM, and endpoint protection mechanisms.

• Cryptography (15%): Symmetric vs. asymmetric encryption, hash functions, PKI, digital certificates, and common algorithms (AES, RSA, SHA).

• Incident Response (10%): The incident response lifecycle, evidence collection, containment strategies, and reporting/documentation.

Course Description

I created this course to give you the most realistic exam experience possible for the GIAC Foundational Cybersecurity Technologies (GFACT) certification. Passing this exam requires more than just memorizing definitions; you need to understand how core technologies interact and how foundational security principles are applied in real-world scenarios.

When I was studying for my own certifications, I found that taking practice exams was the absolute best way to identify weak spots and build test-taking stamina. That is exactly what I have built here. These practice questions mirror the difficulty, format, and structure of the actual GFACT exam. I have carefully authored every question to test your knowledge across operating systems, networking, cryptography, and security operations.

To help you learn actively while you test, I have written in-depth explanations for every single question. You won't just see which answer is right—you will understand exactly why the correct answer is right and why every other option is incorrect. This methodology ensures you are actually learning the concepts, rather than just memorizing answers, giving you the confidence to sit for the real exam.

Sample Practice Questions Preview

Here is a look at how I structure the questions and explanations inside the course:

Question 1: Which of the following protocols is primarily responsible for resolving human-readable domain names into IP addresses?

• A) HTTP

• B) SMTP

• C) DNS

• D) FTP

• E) DHCP

• F) SSH

• Correct Answer: C

• Explanations:

  • A) HTTP is incorrect. Hypertext Transfer Protocol is used for transmitting web page data, not for resolving domain names.

  • B) SMTP is incorrect. Simple Mail Transfer Protocol is used for sending emails between servers.

  • C) DNS is correct. The Domain Name System acts as the phonebook of the internet, translating domain names (like example. com) into IP addresses so browsers can load internet resources.

  • D) FTP is incorrect. File Transfer Protocol is used for transferring computer files between a client and server on a computer network.

  • E) DHCP is incorrect. Dynamic Host Configuration Protocol dynamically assigns IP addresses to devices on a network, but it does not resolve domain names.

  • F) SSH is incorrect. Secure Shell is a cryptographic network protocol for operating network services securely over an unsecured network.

Question 2: In cryptography, which of the following algorithms is the standard example of symmetric encryption?

• A) RSA

• B) SHA-256

• C) AES

• D) ECC

• E) MD5

• F) DSA

• Correct Answer: C

• Explanations:

  • A) RSA is incorrect. Rivest-Shamir-Adleman is a widely used public-key (asymmetric) cryptosystem.

  • B) SHA-256 is incorrect. The Secure Hash Algorithm 256-bit is a hashing algorithm used for integrity, not an encryption algorithm.

  • C) AES is correct. The Advanced Encryption Standard is a fast and highly secure symmetric encryption algorithm that uses the same key for both encryption and decryption.

  • D) ECC is incorrect. Elliptic-curve cryptography is an approach to public-key (asymmetric) cryptography based on the algebraic structure of elliptic curves.

  • E) MD5 is incorrect. Message-Digest algorithm 5 is an outdated cryptographic hash function, not an encryption algorithm.

  • F) DSA is incorrect. The Digital Signature Algorithm is a Federal Information Processing Standard for digital signatures, relying on asymmetric cryptography.

Question 3: During an active malware outbreak on a corporate network, the security team isolates the infected workstations from the rest of the network to prevent the malware from spreading. Which phase of the incident response lifecycle does this action represent?

• A) Preparation

• B) Identification

• C) Containment

• D) Eradication

• E) Recovery

• F) Lessons Learned

• Correct Answer: C

• Explanations:

  • A) Preparation is incorrect. This phase happens before an incident occurs and involves establishing policies, tools, and training.

  • B) Identification is incorrect. This phase is when the team detects and confirms that an incident has occurred, rather than stopping it.

  • C) Containment is correct. Disconnecting or isolating infected machines stops the threat from spreading further and is the textbook definition of the containment phase.

  • D) Eradication is incorrect. This phase involves removing the root cause, such as deleting the malware or patching the vulnerability, which happens after containment.

  • E) Recovery is incorrect. This phase is about restoring systems to normal operation and monitoring them for recurring issues.

  • F) Lessons Learned is incorrect. This is the post-incident phase where the team documents what happened and how to improve future responses.

• Welcome to the Mock Exam Practice Tests Academy to help you prepare for your GIAC Foundational Cybersecurity Technologies (GFACT) Course.

• You can retake the exams as many times as you want

• This is a huge original question bank

• You get support from instructors if you have questions

• Each question has a detailed explanation

• Mobile-compatible with the Udemy app

I hope that by now you're convinced! And there are a lot more questions inside the course.