Limited-Time Offer: Enjoy 50% Savings! - Ends In 0d 00h 00m 00s Coupon code: 50OFF
Free Exam Questions

GSNA Exam Questions & Answers

GIAC Systems and Network Auditor  •  GIAC

416 Questions 180 min Updated Sep 2026 99% Pass Rate
Get Full Access

100% money-back guarantee

Sample GSNA Questions

Practice with real exam-style questions, each with the verified correct answer and explanation.

Q1 MultipleChoice

TCP/IP stack fingerprinting is the passive collection of configuration attributes from a remote device during standard layer 4 network

communications. The combination of parameters may then be used to infer the remote operating system (OS fingerprinting), or incorporated

into a device fingerprint. Which of the following Nmap switches can be used to perform TCP/IP stack fingerprinting?

Correct Answer: C
Explanation:

The nmap -O -p switch can be used to perform TCP/IP stack fingerprinting. Nmap is a free open-source utility for network exploration and

security auditing. It is used to discover computers and services on a computer network, thus creating a 'map' of the network. Just like many

simple port scanners, Nmap is capable of discovering passive services. In addition, Nmap may be able to determine various details about the

remote computers. These include operating system, device type, uptime, software product used to run a service, exact version number of that

product, presence of some firewall techniques and, on a local area network, even vendor of the remote network card. Nmap runs on Linux,

Microsoft Windows etc.

Answer B is incorrect. The nmap -sU -p switch can be used to perform UDP port scanning.

Answer A is incorrect. The nmap -sS switch is used to perform a TCP half scan. TCP SYN scanning is also known as half-open scanning

because in this a full TCP connection is never opened.

Answer D is incorrect. The nmap -sT switch is used to perform a TCP full scan.

Q2 MultipleChoice

Sam works as a Web Developer for McRobert Inc. He creates a Web site. He wants to include the following table in the Web site:

He writes the following HTML code to create the table:

1.

2.

3.

4.

5.

6.

7.

9.

11.

13.

14.

15.

17.

19.

21.

22.

8.

10.

12.

16.

18.

20.

Which of the following tags will Sam place at lines 3 and 4 to create the table?

Correct Answer: D
Explanation:

The tag is used to specify each cell of the table. It can be used only within a row in a table. The ROWSPAN attribute of the tag specifies the

number of rows that a cell spans over in a table. Since, the first cell of the table spans over three rows, Sam will use . specifies the number of

columns that the head row contains.

Answer C is incorrect. Placing the tags given in this option at lines 3 and 4 will create the following table:

Answer B and A are incorrect. There are no attributes such as SPAN and SPANWIDTH for the tag.

Q3 MultipleChoice

John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He is using a tool to crack the wireless encryption keys. The description of the tool is as follows:

Which of the following tools is John using to crack the wireless encryption keys?

Correct Answer: D
Explanation:

AirSnort is a Linux-based WLAN WEP cracking tool that recovers encryption keys. AirSnort operates by passively monitoring transmissions. It

uses Ciphertext Only Attack and captures approximately 5 to 10 million packets to decrypt the WEP keys.

Answer C is incorrect. Kismet is an IEEE 802.11 wireless network sniffer and intrusion detection system.

Q4 MultipleChoice

Web mining allows a user to look for patterns in data through content mining, structure mining, and usage mining. What is the function of structure mining?

Correct Answer: C
Explanation:

Structure mining is used to examine data related to the structure of a particular Web site.

Answer B and A are incorrect. Content mining is used to examine the data collected by search engines and Web spiders.

Answer D is incorrect. Usage mining is used to examine data related to a particular user's browser as well as data gathered by forms

the user may have submitted during Web transactions.

Q5 MultipleChoice

Which of the following protocols are used to provide secure communication between a client and a server over the Internet?

Each correct answer represents a part of the solution. Choose two.

Correct Answer: A, B
Explanation:

SSL and TLS protocols are used to provide secure communication between a client and a server over the Internet.

Get access to all 416 verified questions with detailed answers.

Unlock All GSNA Questions

Frequently Asked Questions

There are no formal prerequisites to take the GSNA exam; however, GIAC recommends that candidates have at least 2 years of IT experience, ideally in system or network administration, auditing, or security roles. Many candidates complete the corresponding GIAC training course before attempting the exam to ensure they have the necessary knowledge.

GSNA certifications are valid for 3 years from the date of certification. To maintain your certification after the 3-year period, you must either retake the exam or earn continuing education credits through approved GIAC activities.

The GSNA exam covers systems and network auditing methodologies, including network protocols, system hardening, vulnerability assessment, audit planning, and compliance frameworks. It also includes practical knowledge of auditing tools and techniques used to evaluate security controls and identify weaknesses in IT infrastructure.

The GSNA exam uses a scaled scoring system, and candidates typically need to score approximately 70-75% to pass, though the exact passing threshold may vary. GIAC does not publish the exact passing score publicly to maintain exam integrity.

The GSNA exam typically costs around $949 USD, though this price may vary by region and can change. Many candidates also invest in official GIAC training courses, which can cost between $2,000-$3,000 depending on the delivery method (online, in-person, or self-paced).
Exam Details
  • Exam CodeGSNA
  • VendorGIAC
  • Total Questions416
  • Duration180 min
  • LanguageEnglish
  • Last UpdatedSep 3, 2026
4.9/5

Pass GSNA First Time

Get all 416 exam questions with verified answers and 90-day free updates.

Buy Now & Pass
  • PDF + Practice Test Bundle
  • 90-Day Free Updates
  • 100% Money-Back Guarantee
  • Instant Download
  • 24/7 Customer Support
99% Pass Rate Trusted by 50,000+ IT professionals