A financial institution is redesigning its network to isolate a new payment processing system from the rest of the corporate network. The system must be accessible to internal employees for administration, and to an external partner for transaction processing. The security team must balance strict isolation with operational usability. Which architecture best meets these requirements?

Use a single flat network and implement application-level authentication for all access to the payment system.

Connect the payment system directly to the internet and rely on a VPN for partner access, with no internal segmentation.

Create a dedicated VLAN for the payment system, place it behind a firewall, and allow only specific IP addresses and ports for administration and partner traffic.

Place the payment system in the DMZ with the partner-facing interface, and allow all internal employees to access it for administration.

A security architect is using TOGAF to develop an enterprise architecture that includes security considerations. The architect needs to ensure that security monitoring requirements are integrated into the architecture development process. Which TOGAF phase is most relevant for defining the monitoring architecture?

Information Systems Architectures (Phase C)

Opportunities and Solutions (Phase E)

Architecture Change Management (Phase H)

A security architect is designing a monitoring solution for a system that processes credit card data. The architect wants to ensure that the monitoring system itself is protected from tampering. Which combination of principles and technologies best achieves this?

Network segmentation with a dedicated monitoring VLAN

Separation of duties between monitoring and log review

Least privilege for monitoring accounts and write-once storage for logs

Defense in depth with multiple SIEMs

GIAC Continuous Monitoring Certification

Domain 1Objective 2

Security Architecture Overview GMON Practice Questions (Page 2)

Part of the Security Monitoring Foundations domain, which makes up ~15% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–18 in this domain), expect 4–6 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

6concepts

Questions 6–10

6expert · hard
A financial institution is redesigning its network to isolate a new payment processing system from the rest of the corporate network. The system must be accessible to internal employees for administration, and to an external partner for transaction processing. The security team must balance strict isolation with operational usability. Which architecture best meets these requirements?
Select an answer first
7foundation · easy
Which security architecture design pattern is specifically used to create a buffer zone between an untrusted external network and a trusted internal network?
Select an answer first
8foundation · easy
Which security architecture principle ensures that a user or system is granted only the minimum level of access necessary to perform its required functions?
Select an answer first
9application · medium
A security architect is using TOGAF to develop an enterprise architecture that includes security considerations. The architect needs to ensure that security monitoring requirements are integrated into the architecture development process. Which TOGAF phase is most relevant for defining the monitoring architecture?
Select an answer first
10expert · hard
A security architect is designing a monitoring solution for a system that processes credit card data. The architect wants to ensure that the monitoring system itself is protected from tampering. Which combination of principles and technologies best achieves this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMON

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMON” is a trademark of its owner, used for identification only.

Security Architecture Overview GMON Practice Questions (Page 2)

Questions 6–10

Which security architecture design pattern is specifically used to create a buffer zone between an untrusted external network and a trusted internal network?

Which security architecture principle ensures that a user or system is granted only the minimum level of access necessary to perform its required functions?

A security architect is designing a monitoring solution for a system that processes credit card data. The architect wants to ensure that the monitoring system itself is protected from tampering. Which combination of principles and technologies best achieves this?

Keep studying — Security Monitoring Foundations