SANS SEC 301 CERTIFICATION SCRIPT
2026 QUESTIONS WITH SOLUTIONS
GRADED A+
>> Honeynet
Answer: Network of honeypots
>> Data Loss Prevention (DLP)
Answer: Preventing data exfiltration
>> Endpoint Detection and Response (EDR)
Answer: Advanced endpoint protection
>> Antivirus Software
Answer: Malware detection program
>> Anti-malware
Answer: Software protecting against malware
>> Whitelisting
Answer: Allowing only approved applications
>> Blacklisting
Answer: Blocking known bad applications
>> Application Control
Answer: Restricting application execution
, >> Patch Management
Answer: Updating software vulnerabilities
>> Vulnerability Management
Answer: Process of finding and fixing flaws
>> Configuration Management
Answer: Controlling system settings
>> Baseline Configuration
Answer: Standard system setup
>> Hardening
Answer: Reducing system attack surface
>> Security Baseline
Answer: Minimum security requirements
>> Change Management
Answer: Controlling system changes
>> Incident Response
Answer: Handling security incidents
>> Incident Response Plan
Answer: Documented response procedures
>> Security Operations Center (SOC)
Answer: Centralized security monitoring
2026 QUESTIONS WITH SOLUTIONS
GRADED A+
>> Honeynet
Answer: Network of honeypots
>> Data Loss Prevention (DLP)
Answer: Preventing data exfiltration
>> Endpoint Detection and Response (EDR)
Answer: Advanced endpoint protection
>> Antivirus Software
Answer: Malware detection program
>> Anti-malware
Answer: Software protecting against malware
>> Whitelisting
Answer: Allowing only approved applications
>> Blacklisting
Answer: Blocking known bad applications
>> Application Control
Answer: Restricting application execution
, >> Patch Management
Answer: Updating software vulnerabilities
>> Vulnerability Management
Answer: Process of finding and fixing flaws
>> Configuration Management
Answer: Controlling system settings
>> Baseline Configuration
Answer: Standard system setup
>> Hardening
Answer: Reducing system attack surface
>> Security Baseline
Answer: Minimum security requirements
>> Change Management
Answer: Controlling system changes
>> Incident Response
Answer: Handling security incidents
>> Incident Response Plan
Answer: Documented response procedures
>> Security Operations Center (SOC)
Answer: Centralized security monitoring
