SANS SEC 301 Exam 2026 Questions and
Answers
Everyone can do everything they need to do and nothing more. Bradley Manning -
WikiLeaks Target - HVAC hack - Correct answer-Principle of Least Privilege
The cornerstone of all security: Everyting done in security addresses one or more
of these three things
Confidentiality, Integrity, availability
Confidentiality - Only those who need to access something can; ties into principle
of least privilege
Integrity - data is edited correctly and by the right people. Failure ex.: Delta $5
tickets round trip tickets to anywhere Delta flies/attach on pricing database
Availability - If you cannot use it, why do you have it? - Correct answer-CIA Triad
Pharmaceuticals and government, research - Correct answer-Confidentiality
Financials maintained in part by confidentiality - Correct answer-Integrity
©COPYRIGHT 2025, ALL RIGHTS RESERVED 1
,eCommerce Ex. Amazon make $133,000/per minute thus denial of service is
critical business impact; power company need to keep lights on = availability issue
- Correct answer-Availability
Authentication, Authorization, Accountability - Correct answer-AAA
Detailed steps to make policy happen - Correct answer-Procedure
Policy, Procedure and Training - Correct answer-PPT
Users must know what policies and procedures say to follow them. - Correct
answer-Training
Broad general statement of management's intent to protect information - Correct
answer-Policy
A security professional needs to be:
1/3 technologist
1/3 manager
1/3 lawyer
-Tkhis is the perfect summation of the career field.
-Technology supports security efforts
-Management decisions (and budgets) drive security
©COPYRIGHT 2025, ALL RIGHTS RESERVED 2
,-Legal issues mandate security requirements - Correct answer-Security by Thirds
Senior Mgmt:
-Has legal responsibility to protect the assets of the org:
That give him the ultimate responsibility for security
-Authority can be delegated - responsibility cannot be
Data owner - person or office with primary responsibility for data; owners
determine classification, protective measures and more
Data custodian - the person/group that implement the controls; make the decisions
of the owner happens
Users - use data; are also automatically data custodians - Correct answer-Security
Roles and Responsiblities
safety of people - Correct answer-Number 1 Goal of Security
years ago: teenagers
today: we face organized crime and nation states
-well funded
-highly motivated
©COPYRIGHT 2025, ALL RIGHTS RESERVED 3
, disgruntled insider: difficult to counter; tends to be subtle; often damaging or even
devastating
Accidental insider: common; also tend to be subtle; in aggregate - even ore
damaging
Outsider threat source - inside threat actor: a growing proble, the current most-
common attack vector
2014 - 47% of U. S. adults had private data compromised in a breach (NBC News)
FBI can prove it was North Korea that attacked Sony - Correct answer-Nature of
the Threat
- Correct answer-Security Policy
- Correct answer-Separation of Duties
- Correct answer-Acceptable Use Policy
©COPYRIGHT 2025, ALL RIGHTS RESERVED 4
Answers
Everyone can do everything they need to do and nothing more. Bradley Manning -
WikiLeaks Target - HVAC hack - Correct answer-Principle of Least Privilege
The cornerstone of all security: Everyting done in security addresses one or more
of these three things
Confidentiality, Integrity, availability
Confidentiality - Only those who need to access something can; ties into principle
of least privilege
Integrity - data is edited correctly and by the right people. Failure ex.: Delta $5
tickets round trip tickets to anywhere Delta flies/attach on pricing database
Availability - If you cannot use it, why do you have it? - Correct answer-CIA Triad
Pharmaceuticals and government, research - Correct answer-Confidentiality
Financials maintained in part by confidentiality - Correct answer-Integrity
©COPYRIGHT 2025, ALL RIGHTS RESERVED 1
,eCommerce Ex. Amazon make $133,000/per minute thus denial of service is
critical business impact; power company need to keep lights on = availability issue
- Correct answer-Availability
Authentication, Authorization, Accountability - Correct answer-AAA
Detailed steps to make policy happen - Correct answer-Procedure
Policy, Procedure and Training - Correct answer-PPT
Users must know what policies and procedures say to follow them. - Correct
answer-Training
Broad general statement of management's intent to protect information - Correct
answer-Policy
A security professional needs to be:
1/3 technologist
1/3 manager
1/3 lawyer
-Tkhis is the perfect summation of the career field.
-Technology supports security efforts
-Management decisions (and budgets) drive security
©COPYRIGHT 2025, ALL RIGHTS RESERVED 2
,-Legal issues mandate security requirements - Correct answer-Security by Thirds
Senior Mgmt:
-Has legal responsibility to protect the assets of the org:
That give him the ultimate responsibility for security
-Authority can be delegated - responsibility cannot be
Data owner - person or office with primary responsibility for data; owners
determine classification, protective measures and more
Data custodian - the person/group that implement the controls; make the decisions
of the owner happens
Users - use data; are also automatically data custodians - Correct answer-Security
Roles and Responsiblities
safety of people - Correct answer-Number 1 Goal of Security
years ago: teenagers
today: we face organized crime and nation states
-well funded
-highly motivated
©COPYRIGHT 2025, ALL RIGHTS RESERVED 3
, disgruntled insider: difficult to counter; tends to be subtle; often damaging or even
devastating
Accidental insider: common; also tend to be subtle; in aggregate - even ore
damaging
Outsider threat source - inside threat actor: a growing proble, the current most-
common attack vector
2014 - 47% of U. S. adults had private data compromised in a breach (NBC News)
FBI can prove it was North Korea that attacked Sony - Correct answer-Nature of
the Threat
- Correct answer-Security Policy
- Correct answer-Separation of Duties
- Correct answer-Acceptable Use Policy
©COPYRIGHT 2025, ALL RIGHTS RESERVED 4
