A hotel wants to offer free Wi-Fi to guests while protecting the internal network. The hotel's point-of-sale (POS) system is on a separate VLAN. Which wireless security configuration should they use?

WPA2-Enterprise with 802.1X and guest credentials

WPA2-Personal with a shared passphrase posted in the lobby

WPA3-Personal with a long passphrase

Open guest network with captive portal and client isolation

A company has 500 remote employees who use a mix of corporate-issued Windows laptops and personal devices. The security team wants to provide access to an internal web application without installing any client software on personal devices. The application is HTTPS-enabled and uses SAML for authentication. Which remote access solution best meets these requirements?

Deploy an SSL VPN portal that publishes the web application via reverse proxy

Expose the web application directly on the internet with a public IP

Configure an IPsec VPN with certificate-based authentication for all devices

Set up a site-to-site IPsec tunnel from each remote location

A company has a mix of remote users: some need access to a single internal web application, while others need full network access to internal servers. The company wants to minimize the number of VPN technologies to manage. Which approach best balances security and administrative overhead?

Use a site-to-site VPN for all remote users

Deploy a single SSL VPN gateway that supports both clientless access to the web app and a full-tunnel client for users who need network access

Deploy a single IPsec VPN client for all users and grant full network access to everyone

Deploy two separate VPNs: one IPsec for web app users and one SSL VPN for full access

A network architect is designing an IPsec VPN for a multinational company. The company has offices in multiple countries, and some countries have legal restrictions on encryption. The architect must ensure that the VPN complies with local laws while still providing confidentiality for sensitive data. Which approach is most appropriate?

Route all traffic through a hub in a country with no restrictions

Use a single strong encryption algorithm for all offices to simplify management

Use no encryption for traffic to countries with restrictions

Configure the VPN to use the strongest encryption allowed in each jurisdiction

GIAC Defensible Security Architect

Domain 3Objective 2

Network Encryption and Remote Access GDSA Practice Questions (Page 2)

Part of the Network Services and Encryption domain, which makes up ~23% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–18 in this domain), expect 4–6 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

8concepts

Questions 6–10

6application · medium
A hotel wants to offer free Wi-Fi to guests while protecting the internal network. The hotel's point-of-sale (POS) system is on a separate VLAN. Which wireless security configuration should they use?
Select an answer first
7application · medium
A company has 500 remote employees who use a mix of corporate-issued Windows laptops and personal devices. The security team wants to provide access to an internal web application without installing any client software on personal devices. The application is HTTPS-enabled and uses SAML for authentication. Which remote access solution best meets these requirements?
Select an answer first
8application · medium
A company has a mix of remote users: some need access to a single internal web application, while others need full network access to internal servers. The company wants to minimize the number of VPN technologies to manage. Which approach best balances security and administrative overhead?
Select an answer first
9foundation · easy
Which remote access VPN technology is best suited for providing access to a full range of network applications, including legacy protocols that do not run over HTTP?
Select an answer first
10expert · hard
A network architect is designing an IPsec VPN for a multinational company. The company has offices in multiple countries, and some countries have legal restrictions on encryption. The architect must ensure that the VPN complies with local laws while still providing confidentiality for sensitive data. Which approach is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GDSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDSA” is a trademark of its owner, used for identification only.

Network Encryption and Remote Access GDSA Practice Questions (Page 2)

Questions 6–10

A hotel wants to offer free Wi-Fi to guests while protecting the internal network. The hotel's point-of-sale (POS) system is on a separate VLAN. Which wireless security configuration should they use?

A company has a mix of remote users: some need access to a single internal web application, while others need full network access to internal servers. The company wants to minimize the number of VPN technologies to manage. Which approach best balances security and administrative overhead?

Which remote access VPN technology is best suited for providing access to a full range of network applications, including legacy protocols that do not run over HTTP?

Keep studying — Network Services and Encryption