GSEC (GIAC Security Essentials Certification)
Related free Security+ practice: 150 questions, right or wrong on every answer.Practice Security+ free
Exam fee
$999
≈ 789 GBP · 1,349 CAD · 919 EUR · rolling-avg FX; verify with your bank before any payment
Exam code
GSEC
Renewal
4yr
The GSEC (GIAC Security Essentials Certification) is a cybersecurity certification from GIAC with an exam fee of $999 and a 4-year renewal cycle. Approved under DoD 8570. Built from the Bureau of Labor Statistics and GIAC's official exam requirements.
About the GSEC (GIAC Security Essentials Certification)
GSEC is the breadth cert in the GIAC catalog: a hands-on technical exam covering defense-in-depth fundamentals across networking, cryptography, web security, incident response, cloud and virtualization, and Windows and Linux hardening, spanning 25 topic areas per GIAC's own outline. GIAC sets the exam fee at $999 for a direct exam-only attempt; most candidates sit it after the SANS SEC401 course, which adds course tuition on top. The exam runs 4 hours with 106 questions and is open-book proctored. For exam versions released on or after April 6, 2026, the passing score is 72%. Renewal is four years through 36 CPEs (or a $499 renewal fee). GSEC carries the same DoD 8140 IAT II and CSSP mappings as Security+, and unlike Security+, the questions assume you have actually run the commands.
Who should earn it
Hands-on security practitioners who want a more technical alternative to Security+ or CySA+, and SANS course alumni converting course completion into a credential.
Exam details
- Provider
- GIAC
- Exam code
- GSEC
- Questions
- 106
- Duration
- 4 hours
- Passing score
- 72%
- Exam fee
- $999 (verify with GIAC)
- Renewal
- Every 4 years via CPE
- Experience level
- Mid
- DoD 8570/8140
- Approved
Prerequisites
None enforced. GIAC recommends prior IT experience or completion of SANS SEC401 (Security Essentials) before sitting the exam. The exam is open-book proctored, so prepared candidates bring an indexed reference binder.
Key domains
- Defense in depth, access control, and password management
- Network security, protocols, packet analysis, and wireless
- Cryptography fundamentals and applied use
- Incident handling, log management, and SIEM
- Windows and Linux security, hardening, and forensics
- Web communication security and malicious code/exploit mitigation
- Virtualization, cloud security, and AI essentials
- Security frameworks and CIS Controls
Federal and DoD relevance
The GSEC (GIAC Security Essentials Certification) is approved under DoD Directive 8570.01-M (now 8140), so cybersecurity roles supporting US Department of Defense information systems can use it to satisfy the baseline certification requirement for their IAT, IAM, or CSSP workforce category. That matters for federal contractors, cleared facilities, and agencies where 8140 compliance is a hiring gate.
Salary impact
GIAC certs price into mid-career bands at federal contractors and Fortune 500 security teams. SANS reports GSEC holders cluster in the same compensation band as CySA+ and Security+ holders with comparable experience. The DoD 8140 mapping makes GSEC valid for IAT II and select CSSP work roles.
Most relevant roles
Practice this exam
Practice the CompTIA Security+ exam
Security+ covers the security baseline this topic builds on: threats, access control, secure design and operations.
- 150 practice questions in the bank.
- Practice and timed mocks are free, with right or wrong on every answer and your total score.
- Full analysis: $39, one payment for this exam, no subscription. 30-day full refund, no questions asked.
Start free Security+ practiceNot sure which exam? Take Match
CompTIA Security+ is a trademark of CompTIA. DecipherU is not affiliated with or endorsed by CompTIA.
One Security+ practice question Security Architecture
A hospital data center lost utility power for forty minutes. The uninterruptible power supply carried the load for its rated twelve minutes, the standby generator failed to start, and the imaging systems went dark. The generator had been fuelled but had not been run under load in fourteen months. Facilities director Carl is asked what the power design should have included. What is the best answer?
Pick an answer. We tell you right or wrong.
Planning a Security+ exam date? See which version you are taking, with the owner dates and the day we read each one.
This role lives inside a packaged path
Want the curriculum, comp delta, and recommended courses for this role?
DecipherU bundles cybersecurity roles into a small set of packaged paths. Each path has the curriculum sequence, the published salary data for the role, and the recommended courses, all pre-set. Two ways in:
Practice this exam
- GIAC GSECScenario practice for the GIAC GSEC exam, one domain at a time, with the primary source cited after every answer.
Certification details are sourced from official certifying body websites. Verify current pricing, exam format, and requirements directly with the certifying organization before making decisions. DecipherU is not affiliated with any certifying body.
Exam code GSEC. GIAC publishes 8 domains: Defense in depth, access control, and password management, Network security, protocols, packet analysis, and wireless, Cryptography fundamentals and applied use, Incident handling, log management, and SIEM, Windows and Linux security, hardening, and forensics, Web communication security and malicious code/exploit mitigation, Virtualization, cloud security, and AI essentials, Security frameworks and CIS Controls. Practice questions on DecipherU are grouped by those domains.
Up to 106 questions in 4 hours, with a passing score of 72%, according to GIAC. Formats and counts change between exam versions, so confirm on the GIAC site before you book.
GIAC lists the exam fee at $999 USD. Vouchers, bundles and regional pricing differ; the fee on the GIAC site at checkout is the one that applies.
4 years, per GIAC. Renewal is through continuing education credits or by passing a current exam; GIAC sets the credit count and the deadline.
None enforced. GIAC recommends prior IT experience or completion of SANS SEC401 (Security Essentials) before sitting the exam. The exam is open-book proctored, so prepared candidates bring an indexed reference binder.
Sources
- GIAC official website · Certification pricing, exam format, and renewal requirements
- Bureau of Labor Statistics, Occupational Employment and Wage Statistics, May 2024
Related Cybersecurity Resources
Wondering if GSEC (GIAC Security Essentials Certification) is right for you?
Take a free behavioral assessment to discover which certifications align with your natural strengths and cybersecurity career goals.
Was this page helpful?
DecipherU's career insights are drafted with AI assistance from the sources named on the page, under the method set by Julian Calvo, Ed.D. No named person has reviewed this page unless it says so. Career and compensation data come from the U.S. Bureau of Labor Statistics, O*NET, and industry compensation databases. Assessment frameworks are grounded in peer-reviewed psychometric research, learning sciences (University of Miami), organizational learning (Barry University), and applied AI (Northeastern University). AI is used as a research and drafting tool; the methodology, framework design, scoring and editorial standards are set by DecipherU.