An organization is implementing a new policy for network device administration. The policy requires that administrators authenticate with a central identity system and that each administrator has the minimum privileges needed for their role. Which approach should be used?

Use RADIUS or TACACS+ to authenticate administrators against Active Directory and assign privilege levels based on group membership.

Create a shared local account on each device and distribute the password to all administrators.

Enable SSH and require administrators to use their personal SSH keys for authentication.

Use local accounts on each device and manually configure the same privilege level for all administrators.

What is the main purpose of implementing redundancy in network infrastructure?

To simplify network configuration

To increase the speed of the network

To ensure network availability in case of a component failure

To reduce the cost of network equipment

A company is designing a new network for a branch office. The design must separate guest Wi-Fi traffic from internal corporate traffic, and it must also provide load balancing for two application servers. Which two network infrastructure components should the design include?

A single router with no VLANs and a firewall that filters all traffic.

A hub for guest traffic and a switch for corporate traffic, with no load balancing.

A firewall only, with no segmentation or load balancing.

A switch with VLAN support for guest and corporate traffic, and a load balancer in front of the application servers.

What is the primary purpose of network monitoring tools?

To detect anomalies and potential security incidents

To block all suspicious traffic automatically

To replace the need for firewalls

Which action is a network hardening technique for unused switch ports?

Assign them to the management VLAN

GIAC Critical Controls Certification

Domain 6Objective 3

Network Infrastructure Management GCCC Practice Questions (Page 6)

Part of the Application and Network Security domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

9concepts

Questions 26–30

26application · medium
An organization is implementing a new policy for network device administration. The policy requires that administrators authenticate with a central identity system and that each administrator has the minimum privileges needed for their role. Which approach should be used?
Select an answer first
27foundation · easy
What is the main purpose of implementing redundancy in network infrastructure?
Select an answer first
28application · medium
A company is designing a new network for a branch office. The design must separate guest Wi-Fi traffic from internal corporate traffic, and it must also provide load balancing for two application servers. Which two network infrastructure components should the design include?
Select an answer first
29foundation · easy
What is the primary purpose of network monitoring tools?
Select an answer first
30foundation · easy
Which action is a network hardening technique for unused switch ports?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCCC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCCC” is a trademark of its owner, used for identification only.