A network administrator is configuring a VPN for remote employees. The requirement is to ensure that data is encrypted in transit and that the remote user's identity is verified. Which combination of cryptographic mechanisms best meets this requirement?

Use IPsec with AES for encryption and RSA for authentication.

Use Blowfish for encryption and rely on the VPN server's IP address for authentication.

Use Base64 encoding to hide the data and a shared secret for access.

Use only AES in counter mode without any authentication.

A network forensic analyst is documenting the role of encryption in a corporate environment. Which statement correctly describes the primary purpose of encryption?

It verifies the identity of the sender by using a shared secret that only the sender and receiver know.

It compresses data to reduce the amount of storage or bandwidth required for transmission.

It converts plaintext into ciphertext so that only parties with the appropriate key can read the original data.

It ensures that data cannot be altered or deleted by unauthorized parties.

GIAC Network Forensic Analyst

Domain 4Objective 1

Encryption and Encoding GNFA Practice Questions (Page 3)

Part of the Advanced Analysis Techniques domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–26 in this domain), expect 8–13 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

7concepts

Questions 11–15

11foundation · easy
Which encryption protocol is designed to secure IP packets at the network layer, providing confidentiality and integrity for all traffic between two hosts or networks?
Select an answer first
12application · medium
A network administrator is configuring a VPN for remote employees. The requirement is to ensure that data is encrypted in transit and that the remote user's identity is verified. Which combination of cryptographic mechanisms best meets this requirement?
Select an answer first
13foundation · easy
A network forensic analyst is documenting the role of encryption in a corporate environment. Which statement correctly describes the primary purpose of encryption?
Select an answer first
14expert · easy
An analyst is examining a suspicious file that contains the string '0x48656c6c6f'. The analyst suspects it is encoded. What is the most likely encoding?
Select an answer first
15foundation · easy
A forensic analyst is examining a PCAP file and identifies a TLS 1.3 handshake that uses a key exchange algorithm based on elliptic curves. Which encryption algorithm is most likely being used for the actual bulk data encryption in this session?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GNFA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GNFA” is a trademark of its owner, used for identification only.

Encryption and Encoding GNFA Practice Questions (Page 3)

Questions 11–15

Which encryption protocol is designed to secure IP packets at the network layer, providing confidentiality and integrity for all traffic between two hosts or networks?

A network administrator is configuring a VPN for remote employees. The requirement is to ensure that data is encrypted in transit and that the remote user's identity is verified. Which combination of cryptographic mechanisms best meets this requirement?

A network forensic analyst is documenting the role of encryption in a corporate environment. Which statement correctly describes the primary purpose of encryption?

An analyst is examining a suspicious file that contains the string '0x48656c6c6f'. The analyst suspects it is encoded. What is the most likely encoding?

A forensic analyst is examining a PCAP file and identifies a TLS 1.3 handshake that uses a key exchange algorithm based on elliptic curves. Which encryption algorithm is most likely being used for the actual bulk data encryption in this session?

Keep studying — Advanced Analysis Techniques