GIAC Defensible Security Architect
Domain 3Objective 2
Network Encryption and Remote Access GDSA Practice Questions (Page 10)
Part of the Network Services and Encryption domain, which makes up ~23% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–18 in this domain), expect 4–6 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)
49questions here
10free pages
8concepts
Questions 46–49
- 46
A company is migrating its internal web applications to use TLS. The security team wants to ensure that the certificates are trusted by all internal clients and that the certificate lifecycle is managed centrally. Which solution should they implement?
Select an answer first - 47
What is the role of Internet Key Exchange (IKE) in an IPsec VPN?
Select an answer first - 48
A university is deploying a new Wi-Fi network for students and staff. The security team wants to prevent offline dictionary attacks on the Wi-Fi password and also provide forward secrecy for wireless sessions. Which wireless security standard should be selected?
Select an answer first - 49
Which security service is provided by using a message authentication code (MAC) in conjunction with encryption?
Select an answer first
Finished these 4 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to GDSA
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDSA” is a trademark of its owner, used for identification only.