In a SIEM, what is the primary purpose of correlation rules?

To automatically patch vulnerable systems

To encrypt data at rest in the SIEM database

To define conditions that, when met by multiple events, trigger an alert

To compress log data to reduce storage requirements

What is the primary purpose of TLS interception in a proxy?

To block all encrypted traffic from entering the network

To accelerate SSL handshakes by caching session keys

To decrypt and inspect encrypted traffic for threats and policy violations

To encrypt all internal traffic to prevent eavesdropping

A company wants to allow external partners to access an internal web application without exposing the application server directly to the internet. Which proxy deployment should the company use?

Reverse proxy with access control

Forward proxy with URL filtering

Inline proxy with TLS interception

Transparent proxy with content inspection

A company is deploying a forward proxy to monitor and control outbound web traffic. They want to enforce URL filtering and TLS interception, but they also need to ensure that the proxy does not become a single point of failure. Which deployment model best meets these requirements?

A pair of redundant explicit proxies with load balancing.

A single inline transparent proxy.

A cloud-based proxy with a single instance.

A reverse proxy in front of the web server.

GIAC Continuous Monitoring Certification

Domain 2Objective 4

Proxies & SIEM GMON Practice Questions (Page 1)

Part of the Network Monitoring and Protection domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~17–29 in this domain), expect 4–7 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

9concepts

Questions 1–5

1foundation · easy
In a SIEM, what is the primary purpose of correlation rules?
Select an answer first
2foundation · easy
Which proxy security control is specifically designed to prevent users from accessing known malicious or inappropriate websites?
Select an answer first
3foundation · easy
What is the primary purpose of TLS interception in a proxy?
Select an answer first
4application · medium
A company wants to allow external partners to access an internal web application without exposing the application server directly to the internet. Which proxy deployment should the company use?
Select an answer first
5expert · hard
A company is deploying a forward proxy to monitor and control outbound web traffic. They want to enforce URL filtering and TLS interception, but they also need to ensure that the proxy does not become a single point of failure. Which deployment model best meets these requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMON

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMON” is a trademark of its owner, used for identification only.