What is the primary purpose of encryption in network communications?

To ensure that data is not modified during transmission

To prevent denial-of-service attacks on network services

To verify the identity of the communicating parties

To protect the confidentiality of data by making it unreadable to unauthorized parties

A company is setting up a site-to-site IPsec VPN between two offices. The network team wants to ensure that the tunnel can recover quickly if the internet connection drops. They also want to minimize the risk of a man-in-the-middle attack during the initial key exchange. Which configuration should they use?

Use IKEv2 with EAP authentication and DPD

Use IKEv1 with certificates and aggressive mode

Use IKEv1 with pre-shared keys and no DPD

Use IKEv2 with certificates and no DPD

A multinational corporation is designing a remote access architecture that must comply with data residency regulations. The company has offices in the EU and the US. They want to use a single VPN solution for all employees, but the EU data must not leave the EU. Which architecture should they choose?

Use a cloud-based VPN with a single endpoint

Use a single VPN gateway in the EU for all employees

Use a single VPN gateway in the US for all employees

Deploy regional VPN gateways in the EU and US, with EU traffic terminating in the EU

A company operates a warehouse with hundreds of IoT sensors that connect to a wireless network. The sensors only support WPA2-Personal and have no capability for 802.1X. The security team is concerned about the risk of a rogue access point or a sensor being cloned. Which approach provides the best security improvement given the sensor constraints?

Use WPA2-Enterprise with a RADIUS server and device certificates

Place the sensors on a separate VLAN with strict firewall rules and use WPA2-Personal with a strong passphrase

Disable encryption and rely on MAC address filtering

Deploy WPA2-Personal with a very long random passphrase and rotate it regularly

A regional bank needs to provide remote access for 200 employees using company-issued laptops. The laptops are managed with a full disk encryption solution and endpoint protection. The security team wants to avoid installing any additional client software on the laptops and wants to enforce multi-factor authentication (MFA) for every remote session. Which remote access solution best meets these requirements?

Remote Desktop Protocol (RDP) directly exposed to the internet

Site-to-site IPsec VPN between the bank and each employee's home router

SSL VPN portal accessed via the web browser

IPsec remote access VPN with a pre-shared key and no certificates

GIAC Defensible Security Architect

Domain 3Objective 2

Network Encryption and Remote Access GDSA Practice Questions (Page 9)

Part of the Network Services and Encryption domain, which makes up ~23% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–18 in this domain), expect 4–6 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

8concepts

Questions 41–45

41foundation · easy
What is the primary purpose of encryption in network communications?
Select an answer first
42expert · hard
A company is setting up a site-to-site IPsec VPN between two offices. The network team wants to ensure that the tunnel can recover quickly if the internet connection drops. They also want to minimize the risk of a man-in-the-middle attack during the initial key exchange. Which configuration should they use?
Select an answer first
43expert · hard
A multinational corporation is designing a remote access architecture that must comply with data residency regulations. The company has offices in the EU and the US. They want to use a single VPN solution for all employees, but the EU data must not leave the EU. Which architecture should they choose?
Select an answer first
44expert · hard
A company operates a warehouse with hundreds of IoT sensors that connect to a wireless network. The sensors only support WPA2-Personal and have no capability for 802.1X. The security team is concerned about the risk of a rogue access point or a sensor being cloned. Which approach provides the best security improvement given the sensor constraints?
Select an answer first
45application · medium
A regional bank needs to provide remote access for 200 employees using company-issued laptops. The laptops are managed with a full disk encryption solution and endpoint protection. The security team wants to avoid installing any additional client software on the laptops and wants to enforce multi-factor authentication (MFA) for every remote session. Which remote access solution best meets these requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GDSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDSA” is a trademark of its owner, used for identification only.

Network Encryption and Remote Access GDSA Practice Questions (Page 9)

Questions 41–45

What is the primary purpose of encryption in network communications?

Keep studying — Network Services and Encryption