GIAC Security Essentials (GSEC) Exam Prep

What you will be able to do

• Apply defense in depth and defensible network architecture
• Use cryptography, PKI and access control correctly
• Secure and harden Windows and Linux systems
• Monitor networks and analyse traffic for threats
• Handle incidents and manage vulnerabilities methodically
• Apply security policy, awareness and risk management fundamentals
• Pass a timed practice exam covering the GSEC objective areas

What is inside

6 modules, 24 lessons. Each module ends in a graded quiz.

1. 01

   Security Foundations, Access Control and Frameworks

   Builds the foundation the rest of the GSEC exam rests on: layered defense, the prevent, detect and respond cycle, and how access control models and password systems actually work and fail. It then turns strategy into a prioritized plan using the CIS Critical Security Controls, the NIST Cybersecurity Framework and MITRE ATT&CK. The module closes with data loss prevention and mobile device security, where classification, monitoring and device management meet real business pressure.

   4 lessons · 15 quiz questions

2. 02

   Networking, Protocols and Defensible Architecture

   Covers the GSEC networking domain end to end, from protocol behavior and packet analysis through the design of a segmented, instrumented and defensible network. You will learn how firewalls, network intrusion detection and network intrusion prevention are deployed, tuned and evaded in real environments. The module closes with wireless security, comparing WPA2 and WPA3, enterprise authentication and the attacks that target radio networks.

   4 lessons · 15 quiz questions

3. 03

   Cryptography, Web Security and Cloud

   Covers the GSEC domain spanning cryptography, cryptography application, web communication security, and virtualization, cloud security and AI essentials. You learn how cryptosystems work, how PKI, VPNs and GPG apply them, how browsers and web applications are attacked and defended, and how virtual, cloud and AI estates change the security model. Every lesson ends with exam style checks, and the module closes with a fifteen question domain quiz.

   4 lessons · 15 quiz questions

4. 04

   Linux, Endpoints, Containers and macOS

   Covers the GSEC domain spanning Linux fundamentals, Linux security and hardening, endpoint security, and container and macOS security. You learn how a Linux system is assembled, how its permission model is abused and defended, how to harden and audit a host, how host firewalls, HIDS, HIPS and endpoint agents protect a device, and how containers and Macs change the isolation model. Every lesson ends with exam style checks, and the module closes with a fifteen question domain quiz.

   4 lessons · 15 quiz questions

5. 05

   Windows Security and Microsoft Cloud

   Covers the GSEC Windows domain end to end, from Active Directory infrastructure and account security through NTFS, share and registry access controls. You learn how Group Policy, security baselines and application control enforce a standard, how the Windows as a Service model and cloud management keep that standard current, and how services, Entra ID, PowerShell, auditing and forensic artifacts fit together. Every lesson ends with exam style checks, and the module closes with a fifteen question domain quiz.

   4 lessons · 15 quiz questions

6. 06

   Detection, Response and Vulnerability Management

   Covers the GSEC domain spanning incident handling and response, malicious code and exploit mitigation, log management and SIEM, and vulnerability scanning and penetration testing. You learn the six phase incident handling process end to end, how modern malware and exploits work and which mitigations blunt them, how to configure and centralize logging so that a SIEM can detect something real, and how to run scanning and testing programs that reduce risk instead of producing reports. Every lesson ends with exam style checks, and the module closes with a fifteen question domain quiz.

   4 lessons · 15 quiz questions