Windows Security Infrastructure & Access
20 practice questions with explanations — 15 free to try
1 of these 20 questions are in the free 15-question taster · the full topic is part of Premium
PassNova has 20 GIAC GSEC (Security Essentials) practice questions on Windows Security Infrastructure & Access, each with a clear explanation. A 15-question taster is free with no sign-up; the full bank is part of PassNova Premium. Updated for 2026.
Windows Security Infrastructure & Access: example questions & answers
1 worked example with answers and explanations below. Try 15 GIAC GSEC (Security Essentials) questions free in the browser; the full 20-question Windows Security Infrastructure & Access bank is part of PassNova Premium.
Following Microsoft's AGDLP practice in a single domain, how should permissions on a file share be granted to the sales team?
- APermission granted directly to each user account
- BUsers → universal group → local user account → permission
- CUsers → global group → domain local group → permission✓
- DUsers → domain local group → global group → permission
Answer: AGDLP stands for Accounts into Global groups, Global groups into Domain Local groups, and Permissions assigned to the Domain Local groups. Global groups organise users by role, domain local groups represent access to a resource, and nesting them keeps permissions manageable as people join and leave. Reversing the nesting breaks the group scope rules, and granting permissions to individual users quickly becomes impossible to audit.