GIAC GSNA Exam Syllabus
Start Free GSNA Exam Practice After Reviewing the Topics
Before starting your GSNA exam preparation, it is recommended to review the complete GIAC Systems and Network Auditor exam syllabus and carefully go through the exam objectives listed below. Once you understand the exam structure and objectives, you should practice using our free GSNA questions. We also provide premium GSNA practice test, fully updated according to the latest exam objectives, to help you accurately assess your preparedness for the actual exam.
GIAC GSNA Exam Objectives
| Section 1: Auditing Access Control and Data Handling in Web Applications | |
|
Weight: - |
The candidate will demonstrate knowledge of auditing web application access control and data handling.
|
| Section 2: Auditing the Enterprise Network | |
|
Weight: - |
The candidate will demonstrate knowledge of the terms, concepts and processes associated with enterprise networks including cloud computing, containers, and physical networks.
|
| Section 3: Auditing UNIX and Linux Systems | |
|
Weight: - |
The candidate will demonstrate knowledge of how to audit UNIX and Linux systems using common techniques, tools, and scripting commands to determine process information, access controls, and system configurations.
|
| Section 4: Auditing Web Applications | |
|
Weight: - |
The candidate will demonstrate knowledge of auditing web applications.
|
| Section 5: Auditing Windows Systems and Domains | |
|
Weight: - |
The candidate will demonstrate knowledge of how to audit Windows systems using common techniques, tools, and scripting commands to determine process information, access controls, and system configurations.
|
| Section 6: Risk Assessment for Auditors | |
|
Weight: - |
The candidate will demonstrate knowledge of basic risk auditing terms and concepts, and how to perform an auditing risk assessment.
|
| Section 7: The Audit Process | |
|
Weight: - |
The candidate will demonstrate knowledge of basic auditing terms and concepts and demonstrate familiarity with the audit process, baselines, time based security concepts, and how risk assessment are used to identify and specify controls.
|
| Info | |