A large organization is redesigning its network. The security team wants to isolate the research and development (R&D) department from the rest of the network to protect intellectual property. However, R&D employees need to access the internet and occasionally share files with the marketing department. The organization also wants to avoid the cost of purchasing new hardware. Which approach best meets these requirements?

Create a separate VLAN for R&D and use a firewall with rules that allow internet access and controlled access to a specific file-sharing server in marketing

Use a software-defined networking (SDN) controller to implement micro-segmentation, but only if the existing switches support it

Install a physical firewall between every desk in R&D and the rest of the network

Place R&D and marketing on the same subnet and rely on Windows file permissions

A company is deploying a wireless network for a warehouse. The warehouse has a mix of legacy IoT devices that only support WPA2-Personal and newer laptops that support WPA3. The security team wants to provide strong security for the laptops while still allowing the legacy devices to connect. Which approach best balances security and compatibility?

Deploy a single SSID using WPA3 and require all devices to upgrade their firmware to support WPA3

Deploy a single SSID using WPA2-Personal for all devices

Deploy two separate SSIDs: one using WPA3 for the laptops and one using WPA2-Personal for the legacy devices, with the WPA2 SSID isolated from the corporate network

Deploy a single SSID using WPA2-Enterprise with 802.1X and configure the legacy devices with a shared account

A network engineer is configuring a site-to-site VPN between two offices. The VPN must support both IPv4 and IPv6 traffic, and the security team requires that the VPN provide confidentiality and integrity for all traffic. The engineer is considering IPsec in tunnel mode. Which additional consideration is critical for this deployment?

The VPN gateway must be configured to handle both IPv4 and IPv6 encapsulated traffic, and the IPsec security associations must be established for both address families

IPsec requires the use of NAT-T to support IPv6, which is not commonly available

IPsec tunnel mode only encrypts the payload, not the original IP header, so IPv6 extension headers may be exposed

IPsec in tunnel mode does not support IPv6 traffic

GIAC Information Security Professional

Domain 2Objective 3

Communication and Network Security GISP Practice Questions (Page 6)

Part of the Security Architecture and Operations domain, which makes up ~43% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~41–69 in this domain), expect 14–23 from this objective — we provide 58 practice questions to prepare you well beyond it. (estimate)

58questions here

12free pages

12concepts

Questions 26–30

26expert · hard
A large organization is redesigning its network. The security team wants to isolate the research and development (R&D) department from the rest of the network to protect intellectual property. However, R&D employees need to access the internet and occasionally share files with the marketing department. The organization also wants to avoid the cost of purchasing new hardware. Which approach best meets these requirements?
Select an answer first
27expert · hard
A company is deploying a wireless network for a warehouse. The warehouse has a mix of legacy IoT devices that only support WPA2-Personal and newer laptops that support WPA3. The security team wants to provide strong security for the laptops while still allowing the legacy devices to connect. Which approach best balances security and compatibility?
Select an answer first
28foundation · easy
Which protocol is commonly used to secure email communication by encrypting the connection between email clients and servers?
Select an answer first
29foundation · easy
In the TCP/IP model, which layer corresponds most closely to the OSI model's Network layer?
Select an answer first
30expert · hard
A network engineer is configuring a site-to-site VPN between two offices. The VPN must support both IPv4 and IPv6 traffic, and the security team requires that the VPN provide confidentiality and integrity for all traffic. The engineer is considering IPsec in tunnel mode. Which additional consideration is critical for this deployment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GISP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISP” is a trademark of its owner, used for identification only.

Communication and Network Security GISP Practice Questions (Page 6)

Questions 26–30

Which protocol is commonly used to secure email communication by encrypting the connection between email clients and servers?

In the TCP/IP model, which layer corresponds most closely to the OSI model's Network layer?

Keep studying — Security Architecture and Operations