A company needs to enforce security policies that restrict access to social media applications during work hours, while also allowing business-related use of the same applications for the marketing team. Which technology is best suited to enforce this policy?

Network intrusion detection system (NIDS)

Network intrusion prevention system (NIPS)

Next-generation firewall (NGFW)

An organization wants to enforce a policy that blocks peer-to-peer file sharing but allows other internet traffic. The security team needs to ensure the policy is effective even if the application uses non-standard ports. Which NGFW feature is essential for this requirement?

Signature-based intrusion prevention

User identification and authentication

Application awareness and identification

A NIPS is dropping packets under heavy load, causing missed detections. Which tuning strategy would most directly address this performance issue?

Optimize rule ordering and reduce unnecessary rules

Increase the device's memory allocation

Which statement accurately distinguishes a Next-Generation Firewall (NGFW) from a traditional network intrusion prevention system (NIPS)?

A NIPS is always deployed at the network perimeter, while an NGFW is only used internally.

An NGFW cannot perform deep packet inspection, while a NIPS can.

An NGFW integrates application awareness and user identification with firewall and IPS functions, while a NIPS focuses primarily on intrusion detection and prevention.

An NGFW operates at Layer 2 only, while a NIPS operates at Layer 3 and above.

Which operational capability is ONLY possible when a network security device is deployed inline rather than passively?

Generating alerts based on detected malicious patterns

Capturing full packet payloads for forensic analysis

Logging connection metadata for later review

Dropping or resetting malicious traffic in real time

GIAC Continuous Monitoring Certification

Domain 2Objective 2

NGFW GMON Practice Questions (Page 2)

Part of the Network Monitoring and Protection domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~17–29 in this domain), expect 4–7 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

8concepts

Questions 6–10

6application · medium
A company needs to enforce security policies that restrict access to social media applications during work hours, while also allowing business-related use of the same applications for the marketing team. Which technology is best suited to enforce this policy?
Select an answer first
7application · medium
An organization wants to enforce a policy that blocks peer-to-peer file sharing but allows other internet traffic. The security team needs to ensure the policy is effective even if the application uses non-standard ports. Which NGFW feature is essential for this requirement?
Select an answer first
8foundation · easy
A NIPS is dropping packets under heavy load, causing missed detections. Which tuning strategy would most directly address this performance issue?
Select an answer first
9foundation · easy
Which statement accurately distinguishes a Next-Generation Firewall (NGFW) from a traditional network intrusion prevention system (NIPS)?
Select an answer first
10foundation · easy
Which operational capability is ONLY possible when a network security device is deployed inline rather than passively?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMON

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMON” is a trademark of its owner, used for identification only.