Which of the following best describes the purpose of subnetting in a network security architecture?

To segment traffic and enforce security policies between different functional areas

To eliminate the need for firewalls between network zones

To reduce the number of IP addresses needed for the entire network

To enable the use of private IP addresses on the internet

A network administrator notices that the firewall logs show many packets with source IP addresses from the internal 10.0.0.0/8 range arriving on the external interface. The firewall is configured to allow inbound traffic to a public web server. What is the most effective Layer 3 defense to prevent these spoofed packets from entering the network?

Enable unicast Reverse Path Forwarding (uRPF) on the external interface

Add a firewall rule to allow only TCP port 80 inbound

Disable ICMP echo replies on the external interface

Configure the web server to ignore packets from 10.0.0.0/8

Which Layer 3 event is most important to log and monitor for detecting a potential distributed denial of service (DDoS) attack?

An increase in DNS queries to a specific domain

A change in the MAC address table on a switch

A single failed login attempt on a server

A sudden spike in ICMP echo request traffic from many different source IPs

Which Layer 3 protocol is primarily responsible for determining the best path for packets to travel from a source network to a destination network?

Transmission Control Protocol (TCP)

Address Resolution Protocol (ARP)

Internet Control Message Protocol (ICMP)

GIAC Defensible Security Architect

Domain 2Objective 2

Fundamental Layer 3 Defense GDSA Practice Questions (Page 2)

Part of the Network Security Fundamentals domain, which makes up ~25% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 3–5 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

10concepts

Questions 6–10

6foundation · easy
Which routing protocol is commonly used between autonomous systems on the internet and requires careful route filtering to prevent the propagation of invalid routes?
Select an answer first
7foundation · easy
Which of the following best describes the purpose of subnetting in a network security architecture?
Select an answer first
8application · medium
A network administrator notices that the firewall logs show many packets with source IP addresses from the internal 10.0.0.0/8 range arriving on the external interface. The firewall is configured to allow inbound traffic to a public web server. What is the most effective Layer 3 defense to prevent these spoofed packets from entering the network?
Select an answer first
9foundation · easy
Which Layer 3 event is most important to log and monitor for detecting a potential distributed denial of service (DDoS) attack?
Select an answer first
10foundation · easy
Which Layer 3 protocol is primarily responsible for determining the best path for packets to travel from a source network to a destination network?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GDSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDSA” is a trademark of its owner, used for identification only.

Fundamental Layer 3 Defense GDSA Practice Questions (Page 2)

Questions 6–10

Which routing protocol is commonly used between autonomous systems on the internet and requires careful route filtering to prevent the propagation of invalid routes?

Which of the following best describes the purpose of subnetting in a network security architecture?

Which Layer 3 event is most important to log and monitor for detecting a potential distributed denial of service (DDoS) attack?

Which Layer 3 protocol is primarily responsible for determining the best path for packets to travel from a source network to a destination network?

Keep studying — Network Security Fundamentals