GIAC FOUNDATIONAL CYBERSECURITY
TECHNOLOGIES (GFACT) EXAM WITH
QUESTIONS AND VERIFIED ANSWERS,
PLUS DETAILED RATIONALES/EXPERT
VERIFIED FOR GUARANTEED PASS
2026/LATEST UPDATE/INSTANT
DOWNLOAD PDF
Question 1
Which security principle is most directly concerned with ensuring that
information is accessible to authorized users when needed?
A. Confidentiality
B. Integrity
C. Availability
D. Non-repudiation
Answer: C. Availability
Rationale: Availability ensures that systems, applications, networks,
and information remain accessible and usable when authorized users
require them. Attacks such as denial-of-service, ransomware,
hardware failures, and power outages can threaten availability.
Confidentiality protects information from unauthorized disclosure,
while integrity protects it from unauthorized modification.
Question 2
A security administrator discovers that an attacker modified several
database records without authorization. Which component of the CIA
triad was primarily violated?
1
,A. Confidentiality
B. Integrity
C. Availability
D. Authentication
Answer: B. Integrity
Rationale: Integrity means information remains accurate, complete,
and protected against unauthorized modification or destruction.
Altering database records without authorization directly compromises
integrity. Confidentiality concerns unauthorized disclosure, while
availability concerns authorized access when needed.
Question 3
Which of the following BEST describes authentication?
A. Determining what actions a user may perform
B. Proving the identity of a user or system
C. Recording a user's activities
D. Encrypting a user's credentials
Answer: B. Proving the identity of a user or system
Rationale: Authentication establishes that an entity is who or what it
claims to be. Common authentication factors include something you
know, something you have, and something you are. Authorization
occurs after authentication and determines what the authenticated
entity is permitted to access or perform.
Question 4
A user successfully authenticates to a server but receives an "Access
Denied" message when attempting to modify a protected file. Which
security function is responsible for this decision?
2
,A. Authentication
B. Authorization
C. Accounting
D. Identification
Answer: B. Authorization
Rationale: Authorization determines which resources and operations
an authenticated user is permitted to access. The user has already
proven their identity through authentication, but the access-control
system determines that the requested modification is not permitted.
Question 5
Which password-storage technique provides the strongest protection
against disclosure of plaintext passwords if the password database is
stolen?
A. Reversible encryption with a shared key
B. Base64 encoding
C. Plaintext storage with restricted permissions
D. Salted password hashing using a slow password-hashing algorithm
Answer: D. Salted password hashing using a slow password-hashing
algorithm
Rationale: Passwords should generally be stored using an appropriate
one-way password-hashing mechanism combined with a unique salt.
Slow password-hashing algorithms increase the computational cost of
password cracking. Base64 is encoding rather than protection,
plaintext storage exposes passwords directly, and reversible encryption
can expose passwords if the encryption key is compromised.
Question 6
3
, What is the primary purpose of a cryptographic hash function?
A. To provide reversible encryption
B. To produce a fixed-length representation of data
C. To authenticate users automatically
D. To compress files without information loss
Answer: B. To produce a fixed-length representation of data
Rationale: A cryptographic hash function transforms input data into a
fixed-length digest. Small changes to the input should produce a
substantially different digest. Hashes are commonly used for integrity
verification, digital signatures, and password protection. Hashing is
not reversible encryption.
Question 7
An administrator downloads a software package and separately obtains
its SHA-256 hash from a trusted source. Why would comparing the
calculated hash with the trusted hash be useful?
A. It confirms the software is encrypted.
B. It verifies that the downloaded file matches the expected content.
C. It proves the software is completely vulnerability-free.
D. It prevents the software from executing malicious code.
Answer: B. It verifies that the downloaded file matches the expected
content.
Rationale: Comparing cryptographic hashes provides an integrity
check. If the calculated SHA-256 digest matches the trusted digest,
there is strong evidence that the file contents have not changed since
the trusted digest was generated. This does not prove that the software
is vulnerability-free or inherently safe.
4
TECHNOLOGIES (GFACT) EXAM WITH
QUESTIONS AND VERIFIED ANSWERS,
PLUS DETAILED RATIONALES/EXPERT
VERIFIED FOR GUARANTEED PASS
2026/LATEST UPDATE/INSTANT
DOWNLOAD PDF
Question 1
Which security principle is most directly concerned with ensuring that
information is accessible to authorized users when needed?
A. Confidentiality
B. Integrity
C. Availability
D. Non-repudiation
Answer: C. Availability
Rationale: Availability ensures that systems, applications, networks,
and information remain accessible and usable when authorized users
require them. Attacks such as denial-of-service, ransomware,
hardware failures, and power outages can threaten availability.
Confidentiality protects information from unauthorized disclosure,
while integrity protects it from unauthorized modification.
Question 2
A security administrator discovers that an attacker modified several
database records without authorization. Which component of the CIA
triad was primarily violated?
1
,A. Confidentiality
B. Integrity
C. Availability
D. Authentication
Answer: B. Integrity
Rationale: Integrity means information remains accurate, complete,
and protected against unauthorized modification or destruction.
Altering database records without authorization directly compromises
integrity. Confidentiality concerns unauthorized disclosure, while
availability concerns authorized access when needed.
Question 3
Which of the following BEST describes authentication?
A. Determining what actions a user may perform
B. Proving the identity of a user or system
C. Recording a user's activities
D. Encrypting a user's credentials
Answer: B. Proving the identity of a user or system
Rationale: Authentication establishes that an entity is who or what it
claims to be. Common authentication factors include something you
know, something you have, and something you are. Authorization
occurs after authentication and determines what the authenticated
entity is permitted to access or perform.
Question 4
A user successfully authenticates to a server but receives an "Access
Denied" message when attempting to modify a protected file. Which
security function is responsible for this decision?
2
,A. Authentication
B. Authorization
C. Accounting
D. Identification
Answer: B. Authorization
Rationale: Authorization determines which resources and operations
an authenticated user is permitted to access. The user has already
proven their identity through authentication, but the access-control
system determines that the requested modification is not permitted.
Question 5
Which password-storage technique provides the strongest protection
against disclosure of plaintext passwords if the password database is
stolen?
A. Reversible encryption with a shared key
B. Base64 encoding
C. Plaintext storage with restricted permissions
D. Salted password hashing using a slow password-hashing algorithm
Answer: D. Salted password hashing using a slow password-hashing
algorithm
Rationale: Passwords should generally be stored using an appropriate
one-way password-hashing mechanism combined with a unique salt.
Slow password-hashing algorithms increase the computational cost of
password cracking. Base64 is encoding rather than protection,
plaintext storage exposes passwords directly, and reversible encryption
can expose passwords if the encryption key is compromised.
Question 6
3
, What is the primary purpose of a cryptographic hash function?
A. To provide reversible encryption
B. To produce a fixed-length representation of data
C. To authenticate users automatically
D. To compress files without information loss
Answer: B. To produce a fixed-length representation of data
Rationale: A cryptographic hash function transforms input data into a
fixed-length digest. Small changes to the input should produce a
substantially different digest. Hashes are commonly used for integrity
verification, digital signatures, and password protection. Hashing is
not reversible encryption.
Question 7
An administrator downloads a software package and separately obtains
its SHA-256 hash from a trusted source. Why would comparing the
calculated hash with the trusted hash be useful?
A. It confirms the software is encrypted.
B. It verifies that the downloaded file matches the expected content.
C. It proves the software is completely vulnerability-free.
D. It prevents the software from executing malicious code.
Answer: B. It verifies that the downloaded file matches the expected
content.
Rationale: Comparing cryptographic hashes provides an integrity
check. If the calculated SHA-256 digest matches the trusted digest,
there is strong evidence that the file contents have not changed since
the trusted digest was generated. This does not prove that the software
is vulnerability-free or inherently safe.
4
