GIAC Defensible Security Architect
Domain 3Objective 2
Network Encryption and Remote Access GDSA Practice Questions (Page 7)
Part of the Network Services and Encryption domain, which makes up ~23% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–18 in this domain), expect 4–6 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)
49questions here
10free pages
8concepts
Questions 31–35
- 31
A small business wants to provide remote access for its employees. They have a mix of Windows and macOS laptops and want to avoid managing client software. They also want to support split tunneling so that internet traffic does not go through the VPN. Which solution should they choose?
Select an answer first - 32
A multinational company is connecting two office sites over the internet. The security team wants to ensure that the VPN tunnel provides confidentiality, integrity, and authentication of the data. They also want to avoid the overhead of double encryption. Which IPsec configuration should they choose?
Select an answer first - 33
Which remote access VPN technology typically uses a web browser and does not require a pre-installed client?
Select an answer first - 34
A company is planning a remote access architecture for 10,000 employees. The security team wants to ensure high availability and low latency for users across multiple geographic regions. They also need to support both web-based applications and full network access. Which architecture best meets these requirements?
Select an answer first - 35
A company wants to provide remote access to a legacy application that uses a non-web protocol. The security team wants to avoid installing a VPN client on user workstations. Which solution should they choose?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDSA” is a trademark of its owner, used for identification only.