GIAC Security Essentials (GSEC) exam guide

Exam GSEC

GIAC Security Essentials (GSEC) validates practical, hands-on security knowledge beyond terminology: networking, defense in depth, cryptography, Windows, Linux, cloud and AI essentials, incident handling and more. It includes CyberLive performance-based questions in real virtual machines and is DoD 8140 approved.

Questions106

Time limit240 minutes

Passing score72% (for versions released on or after April 6, 2026)

Exam feeSee official page

Valid for4 years

DeliveryRemote proctored (ProctorU) or Pearson VUE test center

Format: Web-based proctored exam with multiple choice and CyberLive hands-on questions; open book (printed materials). Fee note: Price not listed on the GIAC page; cheaper when bundled with SANS SEC401 training.

Who it's for

Security practitioners, IT administrators and managers who need broad, verified technical security skills, often after SANS SEC401.

What the exam covers

Networking, Protocols and Network Security Devices—

Defense in Depth and Security Frameworks (CIS Controls)—

Access Control, Password Management and Cryptography—

Incident Handling, Vulnerability Scanning and Penetration Testing—

Log Management and SIEM—

Windows Security and Microsoft Cloud—

Linux, Container and macOS Security—

Virtualization, Cloud Security and AI Essentials—

A dash means the vendor does not publish a weight for that domain.

Eligibility & prerequisites

Required: None

Recommended: Basic knowledge of networking, technology and security; SANS SEC401 is the aligned course.

Keeping it active

Valid 4 years. Renew by earning 36 CPE credits over the 4-year period and paying the GIAC renewal maintenance fee.

Skills & careers

Skills it validates

Network protocols and packet analysis
Defense in depth and CIS Controls
Cryptography and PKI application
Windows and Linux hardening
Log management and SIEM
Vulnerability scanning and incident handling
Cloud, container and AI security essentials

Job roles

Security AnalystSecurity AdministratorSecurity EngineerSOC AnalystIT Security ManagerSystems Administrator

DoD 8140

Recognized in the DoD 8140 qualification matrix for multiple technical cybersecurity work roles (formerly 8570 IAT II). Open the DoD Workforce Navigator

Where it fits in your path

Take before

CompTIA Security+CompTIA Network+

Go next

GIAC Certified Incident Handler (GCIH)GIAC Certified Intrusion Analyst (GCIA)GIAC Penetration Tester (GPEN)GIAC Security Leadership (GSLC)

Planning a degree too? See how this cert earns college credit in the College Credit Navigator.

Build my study plan

Week 1-2: Networking, protocols, packet analysis and network security devices (SEC401 book 1).
Week 3: Defense in depth, IAM, frameworks, DLP and mobile security.
Week 4: Vulnerability management, attacks, web security, logging and incident response.
Week 5: Cryptography, PKI and endpoint security; Windows and Microsoft cloud security.
Week 6: Linux, containers and macOS; build your printed index.
Week 7: Take both GIAC practice tests under exam conditions and refine the index.

Make it yours: pick your exam date and weekly hours. We'll split your time by domain weight and give you a printable plan.

Exam date Hours per week

Exam-day tips

The exam is open book with printed materials only; a well-organized index is the most important prep tool.
CyberLive questions run in real VMs; practice the SEC401 labs until commands are familiar.
Use your two practice tests to time yourself and test your index.
Do not rely on the book for every question; 106 questions in 4 hours leaves little lookup time.
Check the passing score for your exam version in your GIAC account; versions from April 6, 2026 use 72%.

Frequently asked questions

How much does GSEC cost?

GIAC does not list the price on the GSEC page; the attempt costs less when bundled with SANS SEC401 training. Check the SANS order page for the current standalone price.

Is GSEC open book?

Yes. You can bring printed books and notes but no electronic devices.

How long is GSEC valid?

Four years. Renew with 36 CPEs and the renewal maintenance fee.

GSEC vs Security+?

GSEC is more hands-on and in-depth, with CyberLive VM questions, but costs much more. Security+ is the more common baseline requirement.

What is the GSEC passing score?

72% for exam versions released on or after April 6, 2026.

Official page: www.giac.org. Reviewed November 2026. Vendors change fees and objectives, so confirm with the vendor before you book. Spot something out of date? Tell us.

1. Map it thinQguide™ · 409 cert guides 2. Learn it thinQterms™ · 7,491 terms 3. Untangle it 180 look-alike comparisons 4. Prove it thinQready™ · free readiness check

Find your exam