← All Certifications
GIAC

GIAC GSEC Certification

GSEC · 7 domains

Last updated: March 31, 2026

Exam Syllabus & Domains

The GIAC GSEC certification exam covers the following domains. Focus your training time proportionally to each domain's weight.

Domain 1 15%

Networking Fundamentals

  • 1.1 Understand TCP/IP protocol suite and OSI model
  • 1.2 Identify common ports and network services
  • 1.3 Configure and troubleshoot network devices
  • 1.4 Understand DNS, DHCP, and ARP operations
TCP Three-Way HandshakeOSI Model LayersSubnetting/CIDRCommon Ports/ProtocolsDNS OperationDHCP ProcessARP/RARPPacket vs Frame vs Segment
Domain 2 15%

Defense in Depth

  • 2.1 Configure firewalls and network segmentation
  • 2.2 Implement intrusion detection and prevention systems
  • 2.3 Design DMZ and network architecture
  • 2.4 Apply zero trust and network access control principles
Firewall Rule SetsIDS vs IPSNetwork SegmentationDMZ ArchitectureProxy ServersNAC ImplementationVLAN SecurityZero Trust Architecture
Domain 3 15%

Access Controls

  • 3.1 Understand authentication and access control concepts
  • 3.2 Implement password policies and management
  • 3.3 Configure multi-factor authentication
  • 3.4 Understand identity and access management principles
AAA FrameworkRBAC/MAC/DACLDAP/Active DirectoryKerberos AuthenticationMulti-Factor AuthenticationLeast PrivilegeSeparation of DutiesSingle Sign-On
Domain 4 10%

Cryptography

  • 4.1 Understand symmetric and asymmetric encryption
  • 4.2 Implement hashing and digital signatures
  • 4.3 Manage PKI and certificate infrastructure
  • 4.4 Apply cryptography for data protection
AES/DES/3DESRSA/ECCSHA/MD5 HashingDigital SignaturesPKI/Certificate AuthorityTLS HandshakeIPsec VPNKey Exchange (Diffie-Hellman)
Domain 5 15%

Incident Handling and Response

  • 5.1 Develop incident response procedures using PICERL
  • 5.2 Identify and analyze security incidents
  • 5.3 Contain and eradicate threats
  • 5.4 Conduct post-incident activities and lessons learned
PICERL MethodologyEvidence PreservationChain of CustodyIncident ClassificationContainment StrategiesRoot Cause AnalysisLessons LearnedForensic Imaging
Domain 6 10%

Web Security

  • 6.1 Identify and mitigate OWASP Top 10 vulnerabilities
  • 6.2 Implement web application security controls
  • 6.3 Apply secure coding and input validation practices
  • 6.4 Configure web security headers and session management
OWASP Top 10SQL InjectionCross-Site Scripting (XSS)CSRF PreventionInput ValidationSession ManagementContent Security PolicySecure Headers
Domain 7 20%

Operating System and Cloud Security

  • 7.1 Secure Linux systems and services
  • 7.2 Secure Windows systems and Active Directory
  • 7.3 Implement host-based security and endpoint protection
  • 7.4 Apply cloud security and shared responsibility principles
Windows Event IDsLinux File PermissionsSystem HardeningPatch ManagementEndpoint DetectionCloud Shared ResponsibilityIdentity FederationContainer Security

Where to Focus Your Study Time

Domains with higher weight have more exam questions — allocate your study hours accordingly.

D1 Networking Fundamentals
15%
D2 Defense in Depth
15%
D3 Access Controls
15%
D4 Cryptography
10%
D5 Incident Handling and Response
15%
D6 Web Security
10%
D7 Operating System and Cloud Security
20%

Study Tips

Free Study Resources

๐Ÿ“‹

Study Roadmap

Week-by-week study plan with free resources

โœ…

Study Tracker

Track objective completion with progress dashboard

๐Ÿ’ฐ

Cost Calculator

Total cost breakdown and ROI analysis

๐Ÿงช

Practice Quiz

Test your knowledge with free practice questions

Practice Quiz

Test your knowledge before the exam with our free practice quiz.

Take the GIAC GSEC Practice Quiz

Related Comparisons

Not sure if GIAC GSEC is the right choice? Compare it with similar certifications:

GSEC vs Security+

Get the GIAC GSEC Study Planner

Fillable PDF with 12-week schedule, domain trackers, flashcard templates, progress tracking, and quick reference sheets. Available in Standard, ADHD-Friendly, Dark Mode, and 4-Format Bundle.

Get the Study Planner — $5.99

Also available as a 4-Format Bundle for $15.99

CyberFolio

Earned your certs? Show employers.

Build a shareable cybersecurity portfolio that highlights your certifications, projects, and skills — free.

Build Your Portfolio →

Free Training Resources

Use these free tools to support your GIAC GSEC certification training:

Frequently Asked Questions

What is the GIAC GSEC certification?

The GIAC GSEC (GSEC) is a professional IT certification that validates your knowledge and skills in the exam domains covered. It is recognized globally by employers and is a valuable credential for career advancement in cybersecurity and IT.

What does the GIAC GSEC certification syllabus cover?

The GIAC GSEC exam syllabus covers 7 domains. Each domain is weighted differently, so focus your training on higher-weighted domains first. Review the complete domain breakdown above for objectives and key concepts.

How should I study for GIAC GSEC?

Create a structured study plan covering all exam domains, use practice tests to identify weak areas, and review key concepts regularly. A fillable study planner can help you organize your training with weekly schedules and progress tracking.

How long does it take to prepare for GIAC GSEC?

Preparation time varies by experience level. Most candidates spend 8-12 weeks of dedicated training. Using a structured study planner with domain-by-domain breakdown helps ensure you cover all certification objectives efficiently.