GIAC GDSA Exam Overview:
| Certification Vendor: | GIAC |
|---|---|
| Exam Name: | GIAC Defensible Security Architect (GDSA) Exam |
| Exam Number: | GDSA |
| Passing Score: | 63% |
| Exam Duration: | 120 minutes |
| Certificate Validity Period: | 4 years |
| Exam Format: | Scenario-based questions, Multiple-choice, Proctored web-based exam |
| Real Exam Qty: | 75 |
| Exam Price: | $2,499 USD |
| Related Certifications: | GIAC Cloud Security Automation (GCSA) GIAC Network Security Operations (GNSO) GIAC Security Essentials (GSEC) |
| Available Languages: | English |
| Recommended Training: | SANS SEC530: Defensible Security Architecture and Engineering |
| Exam Registration: | GIAC Official Registration |
| Sample Questions: | GIAC GDSA Sample Questions |
| Exam Way: | Web-based proctored exam; remote proctoring via ProctorU or onsite at Pearson VUE test centers |
| Pre Condition: | Recommended: 2+ years of cybersecurity experience, or core-level GIAC certification; solid understanding of network security, security operations, and risk frameworks |
| Official Syllabus URL: | https://www.giac.org/certifications/defensible-security-architecture-gdsa |
GIAC GDSA Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Data-Centric Security | 20% | - Tokenization and data masking - Database activity monitoring and protection - Reverse proxies and WAF implementation - Encryption strategies and key management |
| Data Discovery, Governance, and Mobility Management | 15% | - Mobile Device Management (MDM) and endpoint security - Data classification and inventory - Data lifecycle protection and compliance - Data Loss Prevention (DLP) design and deployment |
| Cloud-based Security Architecture | 20% | - Cloud access control and identity management - Hypervisor and container security - Cloud network segmentation and micro-segmentation - Cloud service models and shared responsibility |
| Fundamental Layer 3 Defense | 15% | - IPv6 security considerations and controls - CIDR, routing protocols and attack mitigation - Bogon filtering and route authentication - Securing SNMP, NTP and other core services |
| Layer 1 / Layer 2 Defense | 10% | - ARP spoofing and broadcast control - VLAN segmentation and protection - Switching infrastructure security |
| Fundamental Security Architecture Concepts | 20% | - Software Defined Networking (SDN) security - Security architecture frameworks and risk assessment - Zero Trust Model principles and implementation - Intrusion Kill Chain and Diamond Model application |
GIAC Defensible Security Architect Sample Questions:
Question #1
What is the primary function of bogon filtering in Layer 3 defense?
Response:
A. Monitoring traffic for potential attacks
B. Blocking spoofed IP addresses that should not appear on the public internet
C. Filtering out malware signatures
D. Encrypting all data in transit
Question #2
Which file classification methodology focuses on categorizing data based on its sensitivity and importance to the organization?
Response:
A. Metadata classification
B. Role-based access control
C. Behavioral classification
D. Content-based classification
Question #3
In cloud security, the shared responsibility model implies that:
Response:
A. Customers are responsible for managing physical security
B. Third-party providers take care of security
C. Cloud service providers manage all security responsibilities
D. Cloud service providers handle the security of the infrastructure, while customers manage their own data
Question #4
What is ARP cache poisoning primarily used for in a network attack?
Response:
A. To enhance network performance by optimizing ARP responses
B. To facilitate the redirection of network traffic to an attacker's machine
C. To encrypt the ARP cache contents
D. To increase the ARP cache size to its maximum limit
Question #5
What does Layer 3 of the OSI model represent?
Response:
A. Application layer
B. Data link layer
C. Transport layer
D. Network layer
Solutions:
| Question #1 Correct Answer: B | Question #2 Correct Answer: D | Question #3 Correct Answer: D | Question #4 Correct Answer: B | Question #5 Correct Answer: D |


PDF Version Demo






We are confident about the products and aim to help you pass with ease. In case of failure, we will provide a no hassle full money back guarantee for the purchasing fee.
991 Customer Reviews
Quality and ValueITbraindumps Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITbraindumps testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITbraindumps offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.