시험에 불합격하면 응시료를 다시 지불해야 하므로 한 번의 합격이 무엇보다 중요합니다. Fast2test의 GISF 모의고사 333문항으로 실전 감각을 미리 익혀 재응시 비용 부담을 줄여 보시기 바랍니다. 2026년에도 꾸준히 업데이트되는 자료입니다.

GIAC GISF 시험 개요:

GIAC GISF 시험 요강 주제:

GIAC GISF 관련 궁금증 해결 가이드

최신 GIAC Information Security GISF 무료샘플문제

문제 #1

You work as a Network Security Analyzer. You got a suspicious email while working on a forensic project. Now, you want to know the IP address of the sender so that you can analyze various information such as the actual location, domain information, operating system being used, contact information, etc. of the email sender with the help of various tools and resources. You also want to check whether this email is fake or real. You know that analysis of email headers is a good starting point in such cases.
The email header of the suspicious email is given below:

What is the IP address of the sender of this email?

A. 172.16.10.90
B. 141.1.1.1
C. 216.168.54.25
D. 209.191.91.180

문제 #2

Which of the following representatives of incident response team takes forensic backups of the systems that are the focus of the incident?

A. Information security representative
B. Lead investigator
C. Legal representative
D. Technical representative

문제 #3

The Klez worm is a mass-mailing worm that exploits a vulnerability to open an executable attachment even in Microsoft Outlook's preview pane. The Klez worm gathers email addresses from the entries of the default Windows Address Book (WAB). Which of the following registry values can be used to identify this worm?

A. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
B. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
C. HKEY_CURRENT_USER\Software\Microsoft\WAB\WAB4\Wab File Name = "file and pathname of the WAB file"
D. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices

문제 #4

Which of the following are the examples of administrative controls?
Each correct answer represents a complete solution. Choose all that apply.

A. Data Backup
B. Auditing
C. Security policy
D. Security awareness training

문제 #5

You work as an Incident handling manager for Orangesect Inc. You detect a virus attack incident in the network of your company. You develop a signature based on the characteristics of the detected virus.
Which of the following phases in the Incident handling process will utilize the signature to resolve this incident?

A. Identification
B. Recovery
C. Eradication
D. Containment

질문과 대답: