Why is it important to integrate physical security with logical security architecture?

To reduce the need for firewalls

Physical access to systems can bypass logical controls

What is the primary purpose of network segmentation in a secure network architecture?

To eliminate the need for firewalls

To isolate sensitive systems from untrusted networks

To simplify IP address management

A data center operator wants to prevent unauthorized physical access to the server racks while also ensuring that only authorized personnel can access the logical systems. Which combination of physical and logical controls best achieves this?

Biometric door locks on the server room and multi-factor authentication (MFA) for all administrative accounts

CCTV cameras only, with no access control on the server room door

A sign-in log at the front desk and a single shared password for administrators

A keypad lock on the server room and no logical access controls

A company is designing a new system that will be accessed by both internal employees and external partners. The security architect wants to ensure that the system is secure by default and that users are granted only the access they need. Which design approach best meets these requirements?

Enable all features by default and restrict access only after a security incident

Provide all users with the same level of access to simplify management

Use a single firewall to protect the entire system and no internal segmentation

Configure the system with a deny-by-default policy and require explicit authorization for each user role

GIAC Information Security Professional

Domain 2Objective 1

Security Architecture and Engineering GISP Practice Questions (Page 1)

Part of the Security Architecture and Operations domain, which makes up ~43% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~41–69 in this domain), expect 14–23 from this objective — we provide 65 practice questions to prepare you well beyond it. (estimate)

65questions here

13free pages

12concepts

Questions 1–5

1foundation · easy
Which security model is specifically designed to prevent a subject from reading an object at a higher classification level?
Select an answer first
2foundation · easy
Why is it important to integrate physical security with logical security architecture?
Select an answer first
3foundation · easy
What is the primary purpose of network segmentation in a secure network architecture?
Select an answer first
4application · medium
A data center operator wants to prevent unauthorized physical access to the server racks while also ensuring that only authorized personnel can access the logical systems. Which combination of physical and logical controls best achieves this?
Select an answer first
5application · medium
A company is designing a new system that will be accessed by both internal employees and external partners. The security architect wants to ensure that the system is secure by default and that users are granted only the access they need. Which design approach best meets these requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GISP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISP” is a trademark of its owner, used for identification only.