GIAC GSEC 考試概覽:

認證廠商:	GIAC
考試名稱:	GIAC資安基礎認證（GSEC）
考試代碼:	GSEC
證照有效期限:	4年
相關認證:	GCIA GISF GCLD GSEC
考試形式:	可翻閱參考資料, 選擇題, 線上監考模式
考試時間:	240 分鐘
及格分數:	72%（自2026年4月6日起適用）；此前為73%
支援語言:	English
考試費用:	949 至 999 美元
實際考試題數:	106
推薦課程:	SANS SEC401：資安基礎課程——網路、端點與雲端防護
考試報名:	GIAC官方報名管道
範例考題:	GIAC GSEC 範例考題
考試方式:	採線上測驗，可透過ProctorU進行遠端監考，或於Pearson VUE考場應試
必備條件:	無強制報考資格要求；建議具備基礎資訊技術與網路知識者參加
官方大綱網址:	https://www.giac.org/certifications/security-essentials-gsec

GIAC GSEC 考試大綱：

主題	簡介
主題 1	Demonstrate an understanding of web application security and common vulnerabilities including CGI, cookies, SSL Access Control & Password Management
主題 2	Understand the concepts of incident handling and the processes pertaining to incident handling Demonstrate how to architect a network to be monitored and controlled to resist intrusion
主題 3	Understand the fundamental theory of access control and the role of passwords in managing access control Basic understand of the mathematical concepts that contribute to cryptography
主題 4	Demonstrate the different strategies for implementing effective security within an organization Introduced to the techniques and technologies used to audit Windows hosts
主題 5	Demonstrate an understanding of the use of system baselines, log files Demonstrate a basic understanding of the function and uses of endpoint security devices
主題 6	Demonstrate understanding of a variety of Linux operating systems, including mobile systems High-level understanding of the use, functionality, and operation of VPNs, GPG, and PKI
主題 7	Understanding of the concepts of cryptography, including a high-level understanding of the major types of cryptosystems and steganography Understand what defense in depth is and an identify the key areas of security
主題 8	Basic understanding of the risks of virtualization and cloud services and how to secure them Identify commonly used symmetric, asymmetric, and hashing cryptosystem
主題 9	Understand the purpose, implementation, and background of the Critical Security Controls Demonstrate a basic understanding of the function and uses of network security devices