A university is designing a network for a research lab that handles sensitive data. The lab's data must be isolated from the general student network, but researchers need to access the data from their lab workstations. The university also wants to allow remote researchers to access the lab network via VPN. Which segmentation approach should the university implement?

Use the same VLAN for the lab and the student network but enable port security on the switches.

Place the lab workstations on the student network and rely on the workstation firewalls to protect the data.

Create a dedicated VLAN for the lab, place the lab workstations in that VLAN, and use a firewall to control traffic between the lab VLAN and the VPN concentrator.

Create a separate physical network for the lab with no connection to the rest of the campus network.

A network team is hardening a firewall that separates the corporate network from a partner network. The firewall must allow specific HTTPS traffic to a partner server. The team wants to ensure that the firewall itself is not vulnerable to management-plane attacks. Which set of actions should the team take?

Enable SNMPv3 with a strong community string and allow management from any IP.

Disable unused management services, restrict management access to a dedicated management VLAN, and use SSH with key-based authentication.

Keep the default management account but change the password to a complex one.

Allow HTTPS management from the partner network to simplify remote administration.

What is the primary goal of the containment phase in incident response for network infrastructure?

To prevent the incident from spreading further

To identify the root cause of the incident

To restore systems to normal operation

To collect evidence for legal proceedings

A network administrator is hardening a router that provides connectivity between the corporate network and a partner organization. The router has several unused interfaces and services enabled by default. Which hardening action is most important to perform first?

Disable all unused interfaces and shut down unused ports.

Change the hostname of the router.

Enable CDP on all interfaces to aid in troubleshooting.

GIAC Critical Controls Certification

Domain 6Objective 3

Network Infrastructure Management GCCC Practice Questions (Page 2)

Part of the Application and Network Security domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

9concepts

Questions 6–10

6expert · hard
A university is designing a network for a research lab that handles sensitive data. The lab's data must be isolated from the general student network, but researchers need to access the data from their lab workstations. The university also wants to allow remote researchers to access the lab network via VPN. Which segmentation approach should the university implement?
Select an answer first
7expert · hard
A network team is hardening a firewall that separates the corporate network from a partner network. The firewall must allow specific HTTPS traffic to a partner server. The team wants to ensure that the firewall itself is not vulnerable to management-plane attacks. Which set of actions should the team take?
Select an answer first
8foundation · easy
What is the primary goal of the containment phase in incident response for network infrastructure?
Select an answer first
9foundation · easy
Which technology is commonly used to create logical network segments within a single physical switch?
Select an answer first
10application · medium
A network administrator is hardening a router that provides connectivity between the corporate network and a partner organization. The router has several unused interfaces and services enabled by default. Which hardening action is most important to perform first?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCCC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCCC” is a trademark of its owner, used for identification only.

Network Infrastructure Management GCCC Practice Questions (Page 2)

Questions 6–10

What is the primary goal of the containment phase in incident response for network infrastructure?

Which technology is commonly used to create logical network segments within a single physical switch?

A network administrator is hardening a router that provides connectivity between the corporate network and a partner organization. The router has several unused interfaces and services enabled by default. Which hardening action is most important to perform first?

Keep studying — Application and Network Security