A hospital deploys a wireless network for staff laptops. The security team must ensure that only authorized devices can connect and that wireless traffic is protected from eavesdropping. Which combination of settings should the team configure on the wireless access points?

WPA3-Personal with a complex passphrase and enable WPS.

WPA2-Enterprise with 802.1X authentication using RADIUS, and disable SSID broadcast.

Use WEP with a 128-bit key and hide the SSID.

WPA2-Personal with a long pre-shared key and MAC address filtering.

A network engineer is troubleshooting a connectivity issue where a client can ping the server's IP address but cannot connect to a web application running on the server. The firewall is not blocking the traffic. Which layer of the OSI model is most likely the source of the problem?

Transport layer, because the web application may be listening on a different TCP port than the one being accessed.

Data link layer, because the switch may be dropping frames.

Network layer, because the IP address is reachable but routing may be misconfigured.

Application layer, because the web server may be down.

A company has a wireless network that uses WPA2-Personal with a shared passphrase. Employees frequently share the passphrase with visitors, and the security team has detected rogue access points that mimic the corporate SSID. The company wants to improve authentication and prevent rogue APs, but they cannot replace all access points immediately. Which combination of measures is most effective given the constraint?

Implement MAC address filtering and enable WPS.

Deploy a VPN for all wireless users and keep WPA2-Personal.

Implement 802.1X with RADIUS on the existing access points, and deploy a wireless intrusion prevention system (WIPS) to detect and block rogue APs.

Change the WPA2-Personal passphrase monthly and disable SSID broadcast.

GIAC Information Security Fundamentals

Domain 2Objective 2

Network Security and Architecture GISF Practice Questions (Page 10)

Part of the Network and Systems Security domain, which makes up ~28% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~14–22 in this domain), expect 5–7 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

10concepts

Questions 46–50

46application · medium
A network administrator notices that internal DNS queries are being sent in clear text and suspects that an attacker on the same subnet is intercepting and modifying DNS responses to redirect users to malicious sites. Which protocol should the administrator implement to protect DNS queries from this type of attack?
Select an answer first
47application · medium
A hospital deploys a wireless network for staff laptops. The security team must ensure that only authorized devices can connect and that wireless traffic is protected from eavesdropping. Which combination of settings should the team configure on the wireless access points?
Select an answer first
48application · medium
A network engineer is troubleshooting a connectivity issue where a client can ping the server's IP address but cannot connect to a web application running on the server. The firewall is not blocking the traffic. Which layer of the OSI model is most likely the source of the problem?
Select an answer first
49expert · hard
A company has a wireless network that uses WPA2-Personal with a shared passphrase. Employees frequently share the passphrase with visitors, and the security team has detected rogue access points that mimic the corporate SSID. The company wants to improve authentication and prevent rogue APs, but they cannot replace all access points immediately. Which combination of measures is most effective given the constraint?
Select an answer first
50application · medium
A network administrator is troubleshooting a connectivity issue. A user can ping the IP address of a server but cannot access a web application hosted on that server. The administrator suspects a firewall is blocking the traffic. Which OSI layer is most likely involved in this issue?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GISF

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISF” is a trademark of its owner, used for identification only.

Network Security and Architecture GISF Practice Questions (Page 10)

Questions 46–50

A hospital deploys a wireless network for staff laptops. The security team must ensure that only authorized devices can connect and that wireless traffic is protected from eavesdropping. Which combination of settings should the team configure on the wireless access points?

A network engineer is troubleshooting a connectivity issue where a client can ping the server's IP address but cannot connect to a web application running on the server. The firewall is not blocking the traffic. Which layer of the OSI model is most likely the source of the problem?

A network administrator is troubleshooting a connectivity issue. A user can ping the IP address of a server but cannot access a web application hosted on that server. The administrator suspects a firewall is blocking the traffic. Which OSI layer is most likely involved in this issue?

Keep studying — Network and Systems Security