A developer is designing a secure communication system between two servers. They need to establish a shared secret over an untrusted network. Which process should they use?

Use Diffie-Hellman key exchange to derive a shared secret, then use a symmetric cipher for data encryption.

Use a hash function to create a shared secret from a public value.

Use RSA to encrypt the data directly with the public key of the other server.

Use a pre-shared key that is manually exchanged out-of-band.

A company has two offices connected via the internet. They need to ensure that all traffic between the offices is encrypted and authenticated. They currently use a site-to-site VPN with IPsec in tunnel mode. A new requirement mandates that all traffic must also be protected against replay attacks. What should the administrator verify or configure?

Implement a second VPN tunnel using TLS to add an extra layer of encryption.

Enable IPsec anti-replay protection, which is provided by the sequence number in the ESP header.

Configure the VPN to use AES-256 instead of the current AES-128.

Change the VPN to transport mode to reduce overhead and improve performance.

At which layer of the OSI model does TLS/SSL provide encryption?

Between the Transport and Application Layers

What is the primary purpose of encrypting network data in transit?

To detect any unauthorized modification of the data during transmission

To ensure that data cannot be read by unauthorized parties during transmission

To verify the identity of the sender and receiver of the data

To compress the data so it uses less bandwidth

GIAC Continuous Monitoring Certification

Domain 7Objective 1

Network Data Encryption GMON Practice Questions (Page 1)

Part of the Data Protection domain, which makes up ~7% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~5–8 in this domain), expect 5–8 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

9concepts

Questions 1–5

1application · medium
A developer is designing a secure communication system between two servers. They need to establish a shared secret over an untrusted network. Which process should they use?
Select an answer first
2foundation · easy
Which security property is provided by a message authentication code (MAC) in an encrypted network communication?
Select an answer first
3application · medium
A company has two offices connected via the internet. They need to ensure that all traffic between the offices is encrypted and authenticated. They currently use a site-to-site VPN with IPsec in tunnel mode. A new requirement mandates that all traffic must also be protected against replay attacks. What should the administrator verify or configure?
Select an answer first
4foundation · easy
At which layer of the OSI model does TLS/SSL provide encryption?
Select an answer first
5foundation · easy
What is the primary purpose of encrypting network data in transit?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMON

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMON” is a trademark of its owner, used for identification only.

Network Data Encryption GMON Practice Questions (Page 1)

Questions 1–5

A developer is designing a secure communication system between two servers. They need to establish a shared secret over an untrusted network. Which process should they use?

Which security property is provided by a message authentication code (MAC) in an encrypted network communication?

At which layer of the OSI model does TLS/SSL provide encryption?

What is the primary purpose of encrypting network data in transit?

Keep studying — Data Protection