GIAC FOUNDATIONAL CYBERSECURITY
TECHNOLOGIES CERTIFICATION EXAM
WITH QUESTIONS AND VERIFIED
ANSWERS, PLUS DETAILED
RATIONALES/EXPERT VERIFIED FOR
GUARANTEED PASS 2026/LATEST
UPDATE/INSTANT DOWNLOAD PDF
1. Computer Hardware & Virtualization
A security analyst is investigating a workstation that has become
extremely slow when multiple applications are running simultaneously.
The system has sufficient disk space, but monitoring shows that physical
memory is almost completely consumed and the operating system is
repeatedly moving inactive memory pages between RAM and disk.
Which hardware resource is most directly responsible for this behavior?
A) CPU cache
B) RAM
C) GPU VRAM
D) Network interface buffer
Answer: B) RAM
Rationale: RAM is the primary volatile memory used by the operating
system and running applications. When physical RAM becomes
scarce, the operating system can use disk-based virtual memory, such
as a paging file or swap space. Disk storage is substantially slower
than RAM, so excessive paging can cause severe performance
degradation. CPU cache is much faster but considerably smaller and
is not normally used as the primary backing store for application
memory.
1
,2. Computer Hardware & Virtualization
An organization wants to run several isolated operating systems on a
single physical server. Each guest operating system should believe that it
has access to its own CPU, memory, storage, and network resources.
Which technology most directly provides this capability?
A) RAID
B) Virtualization
C) DNS
D) NAT
Answer: B) Virtualization
Rationale: Virtualization abstracts physical computing resources and
allows multiple virtual machines to operate on one physical host. A
hypervisor manages the allocation of CPU, memory, storage, and
networking resources to the virtual machines. RAID provides storage
redundancy or performance improvements, DNS resolves names, and
NAT translates network addresses.
3. Computer Hardware & Virtualization
A company uses containers to deploy applications. An administrator
mistakenly claims that containers provide the same degree of hardware-
level isolation as conventional virtual machines because every container
contains its own complete operating-system kernel. Which statement
correctly identifies the problem?
A) Containers cannot communicate over networks
B) Containers generally share the host operating-system kernel
C) Containers require a separate physical CPU
D) Containers cannot run applications
2
,Answer: B) Containers generally share the host operating-system
kernel
Rationale: Containers typically isolate applications and their
dependencies while sharing the host kernel. This generally makes
containers more lightweight and faster to start than full virtual
machines. A conventional virtual machine normally includes a guest
operating system and its own kernel, operating through a hypervisor.
Container isolation can be strong, but it is architecturally different
from VM isolation.
4. Networking
A workstation wants to communicate with a server on a different IP
subnet. Which network device is primarily responsible for determining
the appropriate path between the two networks?
A) Switch
B) Hub
C) Router
D) Repeater
Answer: C) Router
Rationale: A router operates at the network layer and makes
forwarding decisions based primarily on IP addresses and routing
information. A Layer 2 switch primarily forwards Ethernet frames
using MAC addresses within a local network. A hub simply repeats
signals to connected ports, while a repeater regenerates signals rather
than making routing decisions.
5. Networking
3
, A user enters https://example.com into a browser. Before the browser
can establish the HTTPS connection, the system may need to determine
the IP address associated with the domain name. Which protocol/service
performs this function?
A) SMTP
B) DNS
C) SSH
D) FTP
Answer: B) DNS
Rationale: DNS translates human-readable domain names into IP
addresses and can also provide other types of resource records. The
browser can then use the resulting IP address to establish a network
connection. HTTPS provides secure web communication, SMTP
handles email transmission, and SSH provides secure remote
administration.
6. Networking
A security analyst captures a TCP connection and observes that the
client sends a SYN packet, the server responds with SYN/ACK, and the
client sends ACK. What has occurred?
A) DNS resolution
B) TCP three-way handshake
C) TLS certificate exchange
D) ARP poisoning
Answer: B) TCP three-way handshake
Rationale: TCP normally establishes a connection through a three-
step handshake: SYN from the initiating host, SYN/ACK from the
responding host, and ACK from the initiator. This establishes
synchronized sequence information before application data is
4
TECHNOLOGIES CERTIFICATION EXAM
WITH QUESTIONS AND VERIFIED
ANSWERS, PLUS DETAILED
RATIONALES/EXPERT VERIFIED FOR
GUARANTEED PASS 2026/LATEST
UPDATE/INSTANT DOWNLOAD PDF
1. Computer Hardware & Virtualization
A security analyst is investigating a workstation that has become
extremely slow when multiple applications are running simultaneously.
The system has sufficient disk space, but monitoring shows that physical
memory is almost completely consumed and the operating system is
repeatedly moving inactive memory pages between RAM and disk.
Which hardware resource is most directly responsible for this behavior?
A) CPU cache
B) RAM
C) GPU VRAM
D) Network interface buffer
Answer: B) RAM
Rationale: RAM is the primary volatile memory used by the operating
system and running applications. When physical RAM becomes
scarce, the operating system can use disk-based virtual memory, such
as a paging file or swap space. Disk storage is substantially slower
than RAM, so excessive paging can cause severe performance
degradation. CPU cache is much faster but considerably smaller and
is not normally used as the primary backing store for application
memory.
1
,2. Computer Hardware & Virtualization
An organization wants to run several isolated operating systems on a
single physical server. Each guest operating system should believe that it
has access to its own CPU, memory, storage, and network resources.
Which technology most directly provides this capability?
A) RAID
B) Virtualization
C) DNS
D) NAT
Answer: B) Virtualization
Rationale: Virtualization abstracts physical computing resources and
allows multiple virtual machines to operate on one physical host. A
hypervisor manages the allocation of CPU, memory, storage, and
networking resources to the virtual machines. RAID provides storage
redundancy or performance improvements, DNS resolves names, and
NAT translates network addresses.
3. Computer Hardware & Virtualization
A company uses containers to deploy applications. An administrator
mistakenly claims that containers provide the same degree of hardware-
level isolation as conventional virtual machines because every container
contains its own complete operating-system kernel. Which statement
correctly identifies the problem?
A) Containers cannot communicate over networks
B) Containers generally share the host operating-system kernel
C) Containers require a separate physical CPU
D) Containers cannot run applications
2
,Answer: B) Containers generally share the host operating-system
kernel
Rationale: Containers typically isolate applications and their
dependencies while sharing the host kernel. This generally makes
containers more lightweight and faster to start than full virtual
machines. A conventional virtual machine normally includes a guest
operating system and its own kernel, operating through a hypervisor.
Container isolation can be strong, but it is architecturally different
from VM isolation.
4. Networking
A workstation wants to communicate with a server on a different IP
subnet. Which network device is primarily responsible for determining
the appropriate path between the two networks?
A) Switch
B) Hub
C) Router
D) Repeater
Answer: C) Router
Rationale: A router operates at the network layer and makes
forwarding decisions based primarily on IP addresses and routing
information. A Layer 2 switch primarily forwards Ethernet frames
using MAC addresses within a local network. A hub simply repeats
signals to connected ports, while a repeater regenerates signals rather
than making routing decisions.
5. Networking
3
, A user enters https://example.com into a browser. Before the browser
can establish the HTTPS connection, the system may need to determine
the IP address associated with the domain name. Which protocol/service
performs this function?
A) SMTP
B) DNS
C) SSH
D) FTP
Answer: B) DNS
Rationale: DNS translates human-readable domain names into IP
addresses and can also provide other types of resource records. The
browser can then use the resulting IP address to establish a network
connection. HTTPS provides secure web communication, SMTP
handles email transmission, and SSH provides secure remote
administration.
6. Networking
A security analyst captures a TCP connection and observes that the
client sends a SYN packet, the server responds with SYN/ACK, and the
client sends ACK. What has occurred?
A) DNS resolution
B) TCP three-way handshake
C) TLS certificate exchange
D) ARP poisoning
Answer: B) TCP three-way handshake
Rationale: TCP normally establishes a connection through a three-
step handshake: SYN from the initiating host, SYN/ACK from the
responding host, and ACK from the initiator. This establishes
synchronized sequence information before application data is
4
