A company is setting up a remote access solution for employees working from home. They need to ensure that all traffic between the employee's laptop and the corporate network is encrypted and authenticated. Which technology is most appropriate?

A plain remote desktop protocol (RDP) connection without additional encryption.

A remote access VPN using IPsec or TLS, such as an SSL VPN.

A dedicated leased line from the employee's home to the office.

A site-to-site VPN between the employee's home router and the corporate firewall.

A financial institution is required to encrypt all data in transit per PCI-DSS. They use TLS for web traffic and IPsec for internal network links. The security team is implementing a key management policy. Which practice is most important to ensure the confidentiality of the encryption keys?

Store all keys in a hardware security module (HSM) and restrict access to authorized personnel.

Embed the keys in the application configuration files for easy access during deployment.

Use the same key for both TLS and IPsec to simplify management.

Rotate keys only when a breach is suspected to minimize disruption.

A security team is planning to deploy a TLS inspection proxy to monitor encrypted traffic. They are concerned about performance impact and want to minimize latency for users. Which deployment strategy would best reduce the performance impact?

Inspect only a random sample of traffic

Use a dedicated hardware appliance with TLS acceleration and offload bulk encryption

Disable TLS session resumption to force full handshakes

Use a software proxy on the same server as the application

What is a common technique used to inspect encrypted traffic for security monitoring?

Passively capturing the traffic and using the private key to decrypt it offline.

Blocking all encrypted traffic to avoid the need for inspection.

Using a packet sniffer to read the plaintext directly from the encrypted packets.

SSL/TLS interception using a man-in-the-middle proxy with a trusted certificate.

What is the purpose of a digital certificate in a TLS handshake?

To encrypt the session key that will be used for the communication

To authenticate the server's identity to the client

To provide a shared secret key for symmetric encryption

To compress the data before transmission

GIAC Continuous Monitoring Certification

Domain 7Objective 1

Network Data Encryption GMON Practice Questions (Page 6)

Part of the Data Protection domain, which makes up ~7% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~5–8 in this domain), expect 5–8 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

9concepts

Questions 26–30

26application · medium
A company is setting up a remote access solution for employees working from home. They need to ensure that all traffic between the employee's laptop and the corporate network is encrypted and authenticated. Which technology is most appropriate?
Select an answer first
27application · medium
A financial institution is required to encrypt all data in transit per PCI-DSS. They use TLS for web traffic and IPsec for internal network links. The security team is implementing a key management policy. Which practice is most important to ensure the confidentiality of the encryption keys?
Select an answer first
28expert · hard
A security team is planning to deploy a TLS inspection proxy to monitor encrypted traffic. They are concerned about performance impact and want to minimize latency for users. Which deployment strategy would best reduce the performance impact?
Select an answer first
29foundation · easy
What is a common technique used to inspect encrypted traffic for security monitoring?
Select an answer first
30foundation · easy
What is the purpose of a digital certificate in a TLS handshake?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMON

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMON” is a trademark of its owner, used for identification only.