What is a primary security benefit of using NAT for outbound internet traffic?

It authenticates users before allowing internet access

It hides internal IP addresses from external networks

It encrypts all traffic between internal hosts and the internet

It prevents all inbound connections from the internet

What is the key difference between stateful and stateless firewall filtering?

Stateful firewalls operate at Layer 7, while stateless firewalls operate at Layer 3

Stateful firewalls track the state of active connections, while stateless firewalls evaluate each packet independently

Stateful firewalls only filter based on IP addresses, while stateless firewalls filter based on ports

Stateful firewalls are always more secure than stateless firewalls

A security operations center is reviewing firewall logs and notices a large number of denied packets from many different source IPs to a single internal host on port 3389. The packets have varying source ports and the destination IP is constant. Which Layer 3 event should the analyst prioritize for investigation?

A smurf attack originating from the internal network.

A distributed port scan targeting a single host.

A distributed denial-of-service attack against the internal host.

A distributed brute-force attack against the internal host's RDP service.

GIAC Defensible Security Architect

Domain 2Objective 2

Fundamental Layer 3 Defense GDSA Practice Questions (Page 1)

Part of the Network Security Fundamentals domain, which makes up ~25% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 3–5 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

10concepts

Questions 1–5

1foundation · easy
What is a primary security benefit of using NAT for outbound internet traffic?
Select an answer first
2foundation · easy
Which type of NAT maps multiple private IP addresses to a single public IP address using different source ports?
Select an answer first
3foundation · easy
What is the key difference between stateful and stateless firewall filtering?
Select an answer first
4application · medium
A security operations center is reviewing firewall logs and notices a large number of denied packets from many different source IPs to a single internal host on port 3389. The packets have varying source ports and the destination IP is constant. Which Layer 3 event should the analyst prioritize for investigation?
Select an answer first
5foundation · easy
Which Layer 3 tunneling protocol provides encryption and is commonly used to secure traffic between remote sites over the internet?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GDSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDSA” is a trademark of its owner, used for identification only.

Fundamental Layer 3 Defense GDSA Practice Questions (Page 1)

Questions 1–5

What is a primary security benefit of using NAT for outbound internet traffic?

Which type of NAT maps multiple private IP addresses to a single public IP address using different source ports?

What is the key difference between stateful and stateless firewall filtering?

Which Layer 3 tunneling protocol provides encryption and is commonly used to secure traffic between remote sites over the internet?

Keep studying — Network Security Fundamentals