A security architect is designing a layered defense for a corporate network. They want to block known malicious IPs at the network edge, filter outbound web traffic based on URL category, and retain logs of all traffic for incident response. Which combination of controls best achieves this?

Reverse proxy with SSL inspection and a packet-filtering firewall.

Forward proxy with authentication, and a transparent firewall.

Application-layer firewall only, with no proxy.

Stateful firewall at the edge with IP reputation feeds, and a forward proxy with URL filtering and logging.

Which scenario best describes the use of a reverse proxy?

An internal user accesses a public website through a corporate proxy that filters content

A client on the internet sends a request to a company's public-facing web application, and the request is handled by a proxy that forwards it to an internal web server

A proxy is used to anonymize a user's identity when browsing the web

A proxy is used to cache frequently accessed internal documents for employees

How does a proxy enforce authentication for client requests?

By encrypting the connection between client and server

By inspecting the payload of each packet for malware signatures

By requiring the client to present valid credentials before forwarding the request

By blocking requests from unknown IP addresses

A company deploys a forward proxy for all employee web traffic. Management wants to block access to known malware domains and also require employees to authenticate before browsing. Which two proxy security controls should be enabled?

Stateful inspection and port blocking

Content inspection and TLS termination

URL filtering and authentication

GIAC Defensible Security Architect

Domain 3Objective 1

Network Proxies and Firewalls GDSA Practice Questions (Page 1)

Part of the Network Services and Encryption domain, which makes up ~23% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–18 in this domain), expect 4–6 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

8concepts

Questions 1–5

1application · medium
A security architect is designing a layered defense for a corporate network. They want to block known malicious IPs at the network edge, filter outbound web traffic based on URL category, and retain logs of all traffic for incident response. Which combination of controls best achieves this?
Select an answer first
2foundation · easy
Which firewall type inspects the state of active connections and makes decisions based on the context of the traffic flow?
Select an answer first
3foundation · easy
Which scenario best describes the use of a reverse proxy?
Select an answer first
4foundation · easy
How does a proxy enforce authentication for client requests?
Select an answer first
5application · medium
A company deploys a forward proxy for all employee web traffic. Management wants to block access to known malware domains and also require employees to authenticate before browsing. Which two proxy security controls should be enabled?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GDSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDSA” is a trademark of its owner, used for identification only.