A security architect is designing a multi-layered defense for a critical application. The architect has already deployed a firewall and an IDS. To apply defense in depth, which additional control should be added to protect the application layer?

A network-based IDS placed on the internal side of the firewall.

A second network firewall in parallel with the existing one for redundancy.

A web application firewall (WAF) that inspects HTTP traffic for application-layer attacks.

A load balancer to distribute traffic across multiple application servers.

A company is deploying a new web application. The security team wants to ensure that monitoring covers the application layer. Which monitoring source is most appropriate for detecting application-layer attacks such as SQL injection?

Web application firewall (WAF) logs

Network flow logs from the core switch

Which security architecture component is primarily responsible for inspecting network traffic and generating alerts when suspicious patterns are detected?

Intrusion Detection System (IDS)

A company is designing a network for a new branch office. They want to protect the internal network from the internet while also providing a place for external partners to access a file server. Which zoning strategy should they use?

Put the file server on the internal network and open the firewall port for external partners.

Place the file server in a DMZ and the internal network behind a firewall, with rules allowing only the file-sharing protocol to the DMZ.

Use a single firewall with no DMZ and rely on the file server's built-in authentication.

Create a separate VLAN for the file server but allow all traffic between VLANs.

GIAC Continuous Monitoring Certification

Domain 1Objective 2

Security Architecture Overview GMON Practice Questions (Page 5)

Part of the Security Monitoring Foundations domain, which makes up ~15% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–18 in this domain), expect 4–6 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

6concepts

Questions 21–25

21application · medium
A security architect is designing a multi-layered defense for a critical application. The architect has already deployed a firewall and an IDS. To apply defense in depth, which additional control should be added to protect the application layer?
Select an answer first
22application · medium
A company is deploying a new web application. The security team wants to ensure that monitoring covers the application layer. Which monitoring source is most appropriate for detecting application-layer attacks such as SQL injection?
Select an answer first
23foundation · easy
Which security architecture component is primarily responsible for inspecting network traffic and generating alerts when suspicious patterns are detected?
Select an answer first
24application · medium
A company is designing a network for a new branch office. They want to protect the internal network from the internet while also providing a place for external partners to access a file server. Which zoning strategy should they use?
Select an answer first
25foundation · easy
A security architect wants to isolate the payment processing systems from the general corporate network to limit the spread of a potential breach. Which design pattern is most directly applicable?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMON

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMON” is a trademark of its owner, used for identification only.