A security analyst is evaluating a network communication system. The requirement is to ensure that data cannot be read by unauthorized parties and that any modification to the data is detected. Which pair of security services must be implemented?

Authentication and non-repudiation

Encryption and integrity checking (e.g., HMAC)

Firewalls and intrusion detection

What is the primary purpose of a Virtual Private Network (VPN)?

To create a secure, encrypted tunnel over an untrusted network

To replace the need for firewalls

To provide a public IP address for a private network

To increase the speed of the internet connection

A security analyst is reviewing network logs and notices a large volume of outbound DNS queries from a single internal workstation to a domain that is known to be associated with malware. The queries are occurring at regular intervals. What should the analyst do first?

Disable the workstation's network interface

Isolate the workstation from the network

Run an antivirus scan on the workstation

Block the malicious domain on the DNS server

GIAC Information Security Professional

Domain 2Objective 3

Communication and Network Security GISP Practice Questions (Page 8)

Part of the Security Architecture and Operations domain, which makes up ~43% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~41–69 in this domain), expect 14–23 from this objective — we provide 58 practice questions to prepare you well beyond it. (estimate)

58questions here

12free pages

12concepts

Questions 36–40

36application · medium
A security analyst is evaluating a network communication system. The requirement is to ensure that data cannot be read by unauthorized parties and that any modification to the data is detected. Which pair of security services must be implemented?
Select an answer first
37foundation · easy
Which protocol is commonly used to secure web traffic by providing encryption and authentication between a web browser and a server?
Select an answer first
38foundation · easy
At which layer of the OSI model does the TCP protocol operate?
Select an answer first
39foundation · easy
What is the primary purpose of a Virtual Private Network (VPN)?
Select an answer first
40application · medium
A security analyst is reviewing network logs and notices a large volume of outbound DNS queries from a single internal workstation to a domain that is known to be associated with malware. The queries are occurring at regular intervals. What should the analyst do first?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GISP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISP” is a trademark of its owner, used for identification only.

Communication and Network Security GISP Practice Questions (Page 8)

Questions 36–40

A security analyst is evaluating a network communication system. The requirement is to ensure that data cannot be read by unauthorized parties and that any modification to the data is detected. Which pair of security services must be implemented?

Which protocol is commonly used to secure web traffic by providing encryption and authentication between a web browser and a server?

At which layer of the OSI model does the TCP protocol operate?

What is the primary purpose of a Virtual Private Network (VPN)?

A security analyst is reviewing network logs and notices a large volume of outbound DNS queries from a single internal workstation to a domain that is known to be associated with malware. The queries are occurring at regular intervals. What should the analyst do first?

Keep studying — Security Architecture and Operations