A system administrator needs to securely transfer log files from a server to a central log collector over an untrusted network. The log collector only supports standard Unix tools. Which protocol should the administrator use to ensure confidentiality and integrity of the logs in transit?

Use TFTP (Trivial File Transfer Protocol)

Use HTTP with basic authentication

Use FTP with a username and password

A remote employee needs to securely access internal web applications from a public Wi-Fi network. The company wants to protect all traffic from the employee's device to the corporate network without requiring individual application configuration. Which solution should be deployed?

Split-tunnel VPN that only routes corporate traffic

HTTPS-only access to each application

A company is connecting two branch offices over the internet. They need to ensure that all traffic between the offices is encrypted and authenticated. Which IPsec mode should they use?

ESP in transport mode, which encrypts the payload but not the header.

Tunnel mode, which encrypts the entire IP packet.

AH mode, which provides authentication but not encryption.

Transport mode, which encrypts only the payload.

A security analyst is troubleshooting a TLS connection that is failing. The client and server both support TLS 1.2, but the handshake fails with an alert 'no_application_protocol'. What is the most likely cause?

The server's certificate has expired.

The client does not support the server's cipher suite.

The client and server could not agree on an application-layer protocol such as HTTP/2.

The server is overloaded and cannot complete the handshake.

GIAC Continuous Monitoring Certification

Domain 7Objective 1

Network Data Encryption GMON Practice Questions (Page 5)

Part of the Data Protection domain, which makes up ~7% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~5–8 in this domain), expect 5–8 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

9concepts

Questions 21–25

21application · easy
A system administrator needs to securely transfer log files from a server to a central log collector over an untrusted network. The log collector only supports standard Unix tools. Which protocol should the administrator use to ensure confidentiality and integrity of the logs in transit?
Select an answer first
22application · easy
A security analyst is reviewing network traffic and sees that a server is sending sensitive data to a client over port 22. The analyst wants to confirm that the data is encrypted. Which protocol is most likely being used?
Select an answer first
23application · medium
A remote employee needs to securely access internal web applications from a public Wi-Fi network. The company wants to protect all traffic from the employee's device to the corporate network without requiring individual application configuration. Which solution should be deployed?
Select an answer first
24application · medium
A company is connecting two branch offices over the internet. They need to ensure that all traffic between the offices is encrypted and authenticated. Which IPsec mode should they use?
Select an answer first
25expert · hard
A security analyst is troubleshooting a TLS connection that is failing. The client and server both support TLS 1.2, but the handshake fails with an alert 'no_application_protocol'. What is the most likely cause?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMON

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMON” is a trademark of its owner, used for identification only.