What is the primary purpose of network monitoring?

To replace the need for firewalls

To encrypt all network communications

To detect anomalies and potential security incidents

A company wants to implement network access control (NAC) for all devices connecting to the corporate LAN. The requirement is that only devices that meet security policy (e.g., up-to-date antivirus and OS patches) can access the network, and non-compliant devices should be placed in a quarantine VLAN. Which approach best meets this requirement?

Configure the switch ports to require 802.1X authentication using a shared password for all devices.

Implement a guest Wi-Fi network and require all devices to connect wirelessly.

Use MAC address filtering on the switches to allow only known devices.

Deploy a NAC solution that performs a posture assessment on connecting devices and assigns them to a compliant or quarantine VLAN based on policy.

What is a rogue access point?

A wireless access point that uses outdated encryption

An access point that is authorized but misconfigured

A device that jams wireless signals

An unauthorized access point installed on a network without permission

GIAC Information Security Fundamentals

Domain 2Objective 2

Network Security and Architecture GISF Practice Questions (Page 9)

Part of the Network and Systems Security domain, which makes up ~28% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~14–22 in this domain), expect 5–7 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

10concepts

Questions 41–45

41foundation · easy
Which wireless security protocol is considered the most secure among the following and is recommended for modern Wi-Fi networks?
Select an answer first
42foundation · easy
What is the primary purpose of network monitoring?
Select an answer first
43application · medium
A company wants to implement network access control (NAC) for all devices connecting to the corporate LAN. The requirement is that only devices that meet security policy (e.g., up-to-date antivirus and OS patches) can access the network, and non-compliant devices should be placed in a quarantine VLAN. Which approach best meets this requirement?
Select an answer first
44foundation · easy
After a user successfully authenticates to a network, which AAA component determines what resources the user is permitted to access?
Select an answer first
45foundation · easy
What is a rogue access point?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GISF

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISF” is a trademark of its owner, used for identification only.

Network Security and Architecture GISF Practice Questions (Page 9)

Questions 41–45

Which wireless security protocol is considered the most secure among the following and is recommended for modern Wi-Fi networks?

What is the primary purpose of network monitoring?

After a user successfully authenticates to a network, which AAA component determines what resources the user is permitted to access?

What is a rogue access point?

Keep studying — Network and Systems Security