What is the primary security benefit of network segmentation?

It limits lateral movement by isolating sensitive assets

It automatically patches all systems

It increases the speed of the network

It eliminates the need for firewalls

A detection analyst is reviewing network segmentation and notices that a server in the DMZ can initiate connections to a database server in the internal network. Which action is most appropriate?

Investigate whether this communication is required for business operations and, if not, block it.

Block all traffic from the DMZ to the internal network.

Allow the connection because the DMZ server may need to access the database.

Move the database server to the DMZ to simplify the network.

Which of the following is a key challenge in maintaining an up-to-date asset inventory?

The inventory is automatically updated by the OS

Assets are always static and rarely change

New assets are added and existing assets change or are decommissioned frequently

Inventory data is not needed for security

What is the primary purpose of integrating threat intelligence feeds into network and asset analytics?

To replace the need for antivirus software

To enrich analytics with known indicators of compromise

To automatically patch vulnerabilities

GIAC Certified Detection Analyst

Domain 3Objective 1

Asset and Network Analytics GCDA Practice Questions (Page 8)

Part of the Network and Asset Analytics domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 6–10 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

12concepts

Questions 36–40

36foundation · easy
What is the primary security benefit of network segmentation?
Select an answer first
37foundation · easy
Which of the following is an example of an indicator of compromise (IOC) that might be found in a threat intelligence feed?
Select an answer first
38application · medium
A detection analyst is reviewing network segmentation and notices that a server in the DMZ can initiate connections to a database server in the internal network. Which action is most appropriate?
Select an answer first
39foundation · easy
Which of the following is a key challenge in maintaining an up-to-date asset inventory?
Select an answer first
40foundation · easy
What is the primary purpose of integrating threat intelligence feeds into network and asset analytics?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCDA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCDA” is a trademark of its owner, used for identification only.