Practice for the GIAC Security Essentials (GSEC) exam with 14 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: How can a system manager enable a Linux system to access an external storage device that was just connected to a USB por. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the GSEC practice test →
What you will practice
- How can a system manager enable a Linux system to access an external storage device that was just connected t…
- How can the operation or function of programs and services be altered on a Linux system by a typical user?
- Which command allows an administrator to set or change a user's password in Linux?
- How can a user terminate an unresponsive GUI program in Linux?
- How should an administrator approach patch management for Linux?
- Which of the following is NOT a common cause of compromise on a Linux system?
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. How can a system manager enable a Linux system to access an external storage device that was just connected to a USB port?
Answer: B. B) Use the mount command.
The mount command connects a newly attached storage device to the file system, making it accessible to users. Remember that newly attached devices appear in the dev folder but remain inaccessible until properly mounted.
Q2. How can the operation or function of programs and services be altered on a Linux system by a typical user?
Answer: D. D) Modify the configuration files.
Modifying configuration files is the standard method to alter the operation of programs and services in Linux. Unlike Windows, Linux does not use a centralized registry, relying instead on individual text files for customization.
Q3. Which command allows an administrator to set or change a user's password in Linux?
Answer: C. C) passwd
The passwd command allows administrators to set or change user passwords in Linux. Avoid confusing this with the Windows command net user or group management tools, as passwd is the native Linux utility for account credentials.
Q4. How can a user terminate an unresponsive GUI program in Linux?
Answer: C. C) xkill
The xkill command allows users to terminate unresponsive graphical programs by changing the cursor into a crosshair to click and close the targeted window. Process viewers like top only display information and do not directly terminate applications.
Q5. How should an administrator approach patch management for Linux?
Answer: C. C) Promptly test patches before installing approved updates onto systems.
The most reliable patch management approach is to test updates promptly before deployment to prevent unexpected downtime. Installing patches blindly risks system instability, while waiting for an actual breach causes unnecessary exposure.
Q6. Which of the following is NOT a common cause of compromise on a Linux system?
Answer: B. B) Creating regular backups
Creating regular backups is a security best practice and does not cause system compromise. Actual causes of compromise include unpatched vulnerabilities, leftover default accounts, and installing software from untrusted repositories.
Q7. How can an administrator view how long each system process took to fully load during the booting process of Linux?
Answer: A. A) systemd-analyze blame
The systemd-analyze blame command displays the initialization time for each service during the boot process. This helps administrators identify and optimize slow services, whereas systemctl commands manage active units.
Q8. Which command allows an administrator to create a new user account in Linux?
Answer: B. B) useradd
Useradd is correct because it directly creates a new user account in Linux. A common exam trap is choosing a fictional command like mkuser, whereas users only displays active login sessions and fuser identifies processes using files.
Q9. Which of the following is NOT a variant or distribution of Linux?
Answer: B. B) FreeBSD
FreeBSD is correct because it is a Unix-derived operating system, not a Linux distribution. While they share similarities, Linux distributions like Ubuntu and Fedora use the Linux kernel rather than a BSD kernel.
Q10. Which of the following commands is NOT related to performing Linux backups?
Answer: D. D) export
Export is correct because it manages environment variables for child processes and has no backup functionality. Remember that native utilities like tar, cpio, and rsync are the standard command-line tools for creating archives or synchronizing data.
Q11. How are new groups created on a Linux system?
Answer: D. D) Use the groupadd command.
Groupadd is correct because this is the standard Linux command to create a new user group. Be careful not to confuse it with chgrp, which only changes group ownership of existing files, or fictional commands like mkgroup.
Q12. What two types of ownership can be set or defined on a Linux file object? (Choose two.)
Answer: A,B. A) group || B) user
User and group are correct because every Linux file assigns permissions specifically to an owning user and an owning group. The operating system does not define ownership categories for devices or systems, making those options invalid distractors.
Q13. Where are most log files located on a Linux system?
Answer: B. B) /var/log
Most system and application log files are stored in the /var/log directory. Remember that /var holds variable data like logs that grow over time, whereas /etc stores static configuration files.
Q14. What is the main distinction of SELinux in comparison to most other versions or distributions of Linux?
Answer: C. C) Kernel-level implementation of mandatory access control
SELinux implements mandatory access control at the kernel level to enforce strict security policies. Unlike standard Linux discretionary access control, MAC restricts actions based on system-defined labels.
More GSEC drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.