What is the primary purpose of tamper detection controls at the physical layer?

To lock the device to a fixed object

To prevent unauthorized access to a facility

To encrypt data stored on the device

To alert personnel when a device or enclosure has been opened or altered

A network administrator is responsible for a large campus network with multiple access switches. Recently, an attacker plugged a laptop into a wall jack and successfully performed a VLAN hopping attack by negotiating a trunk link. The administrator wants to prevent this attack without affecting legitimate trunk links to other switches. Which configuration change is most appropriate?

Enable BPDU guard on all access ports.

Disable Dynamic Trunking Protocol (DTP) on all access ports and manually configure trunk ports only on switch-to-switch links.

Set the native VLAN to an unused VLAN on all trunk ports.

Enable port security with a maximum MAC address limit on all access ports.

What is the primary function of DHCP snooping?

To filter and validate DHCP messages to prevent rogue DHCP servers and IP address starvation

To validate ARP packets to prevent spoofing

To encrypt DHCP traffic between clients and servers

To provide redundancy for DHCP servers

GIAC Defensible Security Architect

Domain 2Objective 3

Layer 1/Layer 2 Defense GDSA Practice Questions (Page 1)

Part of the Network Security Fundamentals domain, which makes up ~25% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 3–5 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

6concepts

Questions 1–5

1foundation · easy
What is the primary purpose of tamper detection controls at the physical layer?
Select an answer first
2foundation · easy
Which Spanning Tree Protocol security feature disables a port if it receives a Bridge Protocol Data Unit (BPDU), preventing unauthorized switches from joining the topology?
Select an answer first
3application · medium
A network engineer is hardening a switch that connects to a downstream switch in a different building. The downstream switch is managed by another team and occasionally has misconfigurations that cause spanning tree loops. The engineer wants to ensure that the downstream switch cannot become the root bridge and that any loop caused by the downstream switch is contained. Which two features should be enabled on the port connecting to the downstream switch?
Select an answer first
4expert · hard
A network administrator is responsible for a large campus network with multiple access switches. Recently, an attacker plugged a laptop into a wall jack and successfully performed a VLAN hopping attack by negotiating a trunk link. The administrator wants to prevent this attack without affecting legitimate trunk links to other switches. Which configuration change is most appropriate?
Select an answer first
5foundation · easy
What is the primary function of DHCP snooping?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GDSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDSA” is a trademark of its owner, used for identification only.

Layer 1/Layer 2 Defense GDSA Practice Questions (Page 1)

Questions 1–5

What is the primary purpose of tamper detection controls at the physical layer?

Which Spanning Tree Protocol security feature disables a port if it receives a Bridge Protocol Data Unit (BPDU), preventing unauthorized switches from joining the topology?

What is the primary function of DHCP snooping?

Keep studying — Network Security Fundamentals