A company is designing a remote access solution for a small number of power users who need full network access to internal resources, including legacy applications that do not work through a browser. The users have company-managed laptops. The security team wants to enforce multi-factor authentication (MFA) and device compliance checks before granting access. Which solution best meets these requirements?

Site-to-site VPN from the user's home router

Direct RDP over the internet to internal servers

IPsec VPN with a software client and integration with an MFA and endpoint compliance solution

A school district is deploying a wireless network for students. They want to ensure that each student's traffic is encrypted and that students cannot decrypt other students' traffic. Which wireless security protocol should they use?

Open network with captive portal

WPA2-Enterprise with 802.1X and unique credentials per student

WPA2-Personal with a shared passphrase

A healthcare organization is required to rotate encryption keys annually. They currently use a single key for all encrypted data. The security team wants to minimize the impact of key rotation on system availability. Which approach should they take?

Use a single key but change the key version in the metadata

Keep the same key and document the exception

Use envelope encryption with a master key and data encryption keys (DEKs)

Re-encrypt all data with a new key during the rotation window

A software developer is building a secure messaging application. The application needs to encrypt messages between users without requiring a pre-shared secret. The developer plans to use asymmetric encryption to establish a shared session key, then use symmetric encryption for the actual message data. Why is this hybrid approach commonly used?

Asymmetric encryption solves the key distribution problem, while symmetric encryption provides efficient bulk encryption

Symmetric encryption provides better authentication than asymmetric encryption

Asymmetric encryption is faster than symmetric encryption for large data

Symmetric encryption keys are easier to generate than asymmetric keys

GIAC Defensible Security Architect

Domain 3Objective 2

Network Encryption and Remote Access GDSA Practice Questions (Page 3)

Part of the Network Services and Encryption domain, which makes up ~23% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–18 in this domain), expect 4–6 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

8concepts

Questions 11–15

11application · medium
A company is designing a remote access solution for a small number of power users who need full network access to internal resources, including legacy applications that do not work through a browser. The users have company-managed laptops. The security team wants to enforce multi-factor authentication (MFA) and device compliance checks before granting access. Which solution best meets these requirements?
Select an answer first
12application · medium
A school district is deploying a wireless network for students. They want to ensure that each student's traffic is encrypted and that students cannot decrypt other students' traffic. Which wireless security protocol should they use?
Select an answer first
13expert · hard
A healthcare organization is required to rotate encryption keys annually. They currently use a single key for all encrypted data. The security team wants to minimize the impact of key rotation on system availability. Which approach should they take?
Select an answer first
14foundation · easy
Which IPsec protocol provides authentication and integrity for the entire IP packet, including the IP header, but does not provide confidentiality?
Select an answer first
15application · medium
A software developer is building a secure messaging application. The application needs to encrypt messages between users without requiring a pre-shared secret. The developer plans to use asymmetric encryption to establish a shared session key, then use symmetric encryption for the actual message data. Why is this hybrid approach commonly used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GDSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDSA” is a trademark of its owner, used for identification only.

Network Encryption and Remote Access GDSA Practice Questions (Page 3)

Questions 11–15

A school district is deploying a wireless network for students. They want to ensure that each student's traffic is encrypted and that students cannot decrypt other students' traffic. Which wireless security protocol should they use?

A healthcare organization is required to rotate encryption keys annually. They currently use a single key for all encrypted data. The security team wants to minimize the impact of key rotation on system availability. Which approach should they take?

Which IPsec protocol provides authentication and integrity for the entire IP packet, including the IP header, but does not provide confidentiality?

Keep studying — Network Services and Encryption