A security architect is designing a secure communication channel between two applications running on different servers in the same data center. The applications need to exchange sensitive data, and the architect must choose between TLS and IPsec. The requirement is to protect the application-layer protocol without changing the application code. The architect also wants to minimize the performance overhead. Which choice is more appropriate and why?

IPsec, because it operates at the network layer and encrypts all traffic between the servers without requiring application changes

IPsec, because it provides application-layer authentication

TLS, because it operates at the session layer and can be terminated at the application without changing the application code

TLS, because it is always faster than IPsec

What is the primary purpose of a Denial of Service (DoS) attack?

To impersonate a legitimate user

To disrupt the availability of a service

What is micro-segmentation in cloud network security?

A technique that creates fine-grained security zones to isolate workloads and limit lateral movement

A protocol for connecting multiple cloud providers

A method for encrypting data at rest in cloud storage

A way to increase network bandwidth by splitting traffic

What is the primary security benefit of network segmentation?

It allows all devices to communicate freely

It eliminates the need for encryption

It limits the spread of an attack by isolating network segments

It increases the speed of the network

GIAC Information Security Professional

Domain 2Objective 3

Communication and Network Security GISP Practice Questions (Page 2)

Part of the Security Architecture and Operations domain, which makes up ~43% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~41–69 in this domain), expect 14–23 from this objective — we provide 58 practice questions to prepare you well beyond it. (estimate)

58questions here

12free pages

12concepts

Questions 6–10

6expert · hard
A security architect is designing a secure communication channel between two applications running on different servers in the same data center. The applications need to exchange sensitive data, and the architect must choose between TLS and IPsec. The requirement is to protect the application-layer protocol without changing the application code. The architect also wants to minimize the performance overhead. Which choice is more appropriate and why?
Select an answer first
7foundation · easy
What is the primary purpose of a Denial of Service (DoS) attack?
Select an answer first
8foundation · easy
Which component is typically used by NAC to validate a user's identity?
Select an answer first
9foundation · easy
What is micro-segmentation in cloud network security?
Select an answer first
10foundation · easy
What is the primary security benefit of network segmentation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GISP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISP” is a trademark of its owner, used for identification only.

Communication and Network Security GISP Practice Questions (Page 2)

Questions 6–10

What is the primary purpose of a Denial of Service (DoS) attack?

Which component is typically used by NAC to validate a user's identity?

What is micro-segmentation in cloud network security?

What is the primary security benefit of network segmentation?

Keep studying — Security Architecture and Operations