What is a characteristic of a transparent firewall deployment mode?

The firewall is placed only in the DMZ

The firewall operates at Layer 2 and does not require IP address changes for connected devices

The firewall performs network address translation (NAT) for all traffic

The firewall is configured with IP addresses on each interface and routes traffic between networks

A network engineer needs to block traffic based on the application protocol (e.g., allow HTTP but block BitTorrent) on a firewall. Which firewall type is most appropriate for this requirement?

Application-layer firewall (next-generation firewall)

What is a characteristic of an application-layer firewall?

It operates at Layer 7 and can inspect application-specific data

It is stateless and does not track connections

It is only used for outbound traffic filtering

It only inspects IP addresses and port numbers

An organization wants to deploy a firewall that can inspect application-layer protocols and block specific SQL injection patterns. Which firewall type is most appropriate?

Application-layer firewall (WAF)

A company wants to enforce acceptable-use policies for employee internet browsing. They need to block certain categories (e.g., social media) and also log which user visited which site. Which proxy deployment best achieves this?

Deploy a reverse proxy in front of the corporate website.

Use a packet-filtering firewall and block all outbound traffic.

Use a stateful firewall with no proxy and log all connections.

Deploy a forward proxy and configure URL filtering and per-user authentication.

GIAC Defensible Security Architect

Domain 3Objective 1

Network Proxies and Firewalls GDSA Practice Questions (Page 2)

Part of the Network Services and Encryption domain, which makes up ~23% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–18 in this domain), expect 4–6 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

8concepts

Questions 6–10

6foundation · easy
What is a characteristic of a transparent firewall deployment mode?
Select an answer first
7application · medium
A network engineer needs to block traffic based on the application protocol (e.g., allow HTTP but block BitTorrent) on a firewall. Which firewall type is most appropriate for this requirement?
Select an answer first
8foundation · easy
What is a characteristic of an application-layer firewall?
Select an answer first
9application · medium
An organization wants to deploy a firewall that can inspect application-layer protocols and block specific SQL injection patterns. Which firewall type is most appropriate?
Select an answer first
10application · medium
A company wants to enforce acceptable-use policies for employee internet browsing. They need to block certain categories (e.g., social media) and also log which user visited which site. Which proxy deployment best achieves this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GDSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDSA” is a trademark of its owner, used for identification only.