What is the primary purpose of an acceptable use policy (AUP)?

To list all hardware and software inventory

To specify password complexity requirements

To provide step-by-step instructions for incident response

To define the rules for appropriate use of an organization's network and systems

Which countermeasure is most effective at mitigating a denial-of-service (DoS) attack that floods a server with traffic?

Traffic filtering and rate limiting

Changing the server's IP address

A small office has a wireless network using WPA2-PSK. Employees complain of intermittent connectivity, and the administrator discovers an unknown device with a strong signal that appears to be acting as an access point with the same SSID. Which two actions should the administrator take to mitigate this rogue access point threat?

Switch the network to WPA3-Personal and rely on the new protocol to automatically block rogue APs.

Use a wireless intrusion prevention system (WIPS) to detect and block the rogue AP, and change the WPA2 passphrase.

Disable SSID broadcast and enable MAC address filtering on the legitimate access point.

Increase the transmit power of the legitimate access point to overpower the rogue AP.

GIAC Information Security Fundamentals

Domain 2Objective 2

Network Security and Architecture GISF Practice Questions (Page 4)

Part of the Network and Systems Security domain, which makes up ~28% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~14–22 in this domain), expect 5–7 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

10concepts

Questions 16–20

16foundation · easy
What is the primary purpose of an acceptable use policy (AUP)?
Select an answer first
17foundation · easy
Which countermeasure is most effective at mitigating a denial-of-service (DoS) attack that floods a server with traffic?
Select an answer first
18foundation · easy
A network administrator implements encryption on a segment to protect data from eavesdropping. Which core security principle is being directly enforced?
Select an answer first
19foundation · easy
In the AAA framework, which component verifies the identity of a user or device attempting to access the network?
Select an answer first
20application · medium
A small office has a wireless network using WPA2-PSK. Employees complain of intermittent connectivity, and the administrator discovers an unknown device with a strong signal that appears to be acting as an access point with the same SSID. Which two actions should the administrator take to mitigate this rogue access point threat?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GISF

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISF” is a trademark of its owner, used for identification only.

Network Security and Architecture GISF Practice Questions (Page 4)

Questions 16–20

What is the primary purpose of an acceptable use policy (AUP)?

Which countermeasure is most effective at mitigating a denial-of-service (DoS) attack that floods a server with traffic?

A network administrator implements encryption on a segment to protect data from eavesdropping. Which core security principle is being directly enforced?

In the AAA framework, which component verifies the identity of a user or device attempting to access the network?

Keep studying — Network and Systems Security