GIAC GSEC (Se­cu­rity Essen­tials)

GIAC publishes 26 exam objectives. They span networking and protocols, wireless security, defensible network architecture, network security devices and endpoint security; defence in depth, access control and passwords, and data loss prevention with mobile device security; cryptography and its application in VPNs, GPG and PKI; malicious code and exploit mitigation, vulnerability scanning and penetration testing, and web communication security; incident handling, log management and SIEM, and security frameworks including the CIS Controls, NIST CSF and MITRE ATT&CK; virtualisation, cloud security and AI essentials, and container and macOS security; Linux fundamentals and hardening; and Windows security infrastructure, access controls, Group Policy, updates, services and Microsoft cloud, and PowerShell automation, auditing and forensics.

GIAC's GSEC page (checked September 2026) lists one proctored exam of 106 questions with a 4-hour time limit and a minimum passing score of 72%, the score set for exam versions released on or after 6 April 2026. You have 120 days from activation to take it, remotely with ProctorU or at a Pearson VUE test centre. Check the Certification Attempts page in your GIAC account for the exact version you will receive.

Yes, for hardcopy material. GIAC's guidelines allow books, handwritten or printed notes and an index, but the exam is not open internet or open computer: no PDFs or other electronic files, and no material that looks like practice-test questions and answers. You cannot go back to answered questions, although you can skip a limited number (10 to 15, depending on the exam) and return to them, and you get 15 minutes of break time. A well-organised index of your notes is the most useful thing to bring.

CyberLive is GIAC's hands-on question format: you work in virtual machines with real tools to answer some questions. Multiple-choice practice cannot reproduce that, so PassNova's questions lean on applied skills instead — reading tcpdump and nmap output, iptables and sudoers rules, ls -l and icacls listings, Windows event IDs and PowerShell pipelines. Use them to check your understanding, and practise the same tasks in your own Linux and Windows lab before the exam.

GIAC certifications are renewed every four years, either by earning 36 CPE credits over that period or by retaking the exam, and paying the renewal maintenance fee ($499 according to GIAC's renewal FAQ in September 2026). CPEs can come from training, other certifications, industry events, cyber ranges, work experience and community activities, each with its own cap.

GIAC's broad, practitioner-level security certification, aimed at people moving into security from IT, networking or operations. Security analyst / administrator: GIAC lists security professionals, managers and administrators among the people GSEC is for. IT or network engineer moving into security: GIAC names new InfoSec professionals with information systems and networking backgrounds, and IT engineers and supervisors. Security operations: GIAC lists operations personnel among the people GSEC is for. Penetration tester / auditor: GIAC lists penetration testers, forensic analysts and auditors among the people GSEC is for.

You can practise a free 15-question taster with no sign-up. To unlock the full 200-question bank, an AI study tutor and a downloadable study guide, upgrade to PassNova Premium — £4.99/month with a 7-day free trial.

Premium unlocks every Premium course in full, plus Nova (the AI study tutor), smart spaced-repetition practice, a study planner, mock pass certificates and downloadable PDF study guides — for £4.99/month or £39.99/year. Cancel anytime.

PassNova has 200 exam-style GIAC GSEC (Security Essentials) questions and 6 timed mock tests, each with a clear explanation. A free 15-question taster is spread across the topics; the rest unlock with Premium.

Verified against giac.org in September 2026: GSEC is one proctored exam of 106 questions in 4 hours, with a minimum passing score of 72% (the score GIAC set for exam versions released on or after 6 April 2026), and it includes CyberLive hands-on items in virtual machines. You have 120 days from activation to sit your attempt, remotely through ProctorU or onsite at a Pearson VUE centre. GIAC exams are open book for hardcopy material only — printed notes, books and an index are allowed, but nothing electronic and no internet — and answered questions cannot be revisited. The certification is renewed every four years with 36 CPEs or by retaking the exam. GIAC lists 26 exam objectives, and PassNova's 200 original questions cover every one across ten topics. One honest caveat: multiple-choice practice cannot reproduce CyberLive's hands-on tasks, so many questions here ask you to read real command output, logs and configuration instead — pair them with lab time. GIAC says the Certification Attempts page in your account is the definitive source for your exam version.

No — deliberately. Every PassNova question is written from the published exam objectives, not copied from a live exam. Sites that republish real questions ("exam dumps") breach the candidate agreement you accept when you book, and using them can void your result or cost you a credential you already hold. PassNova matches the real exam's style, difficulty and domain weighting without reproducing its content.