A security team is designing a solution to securely transfer files between two servers over the internet. They need to ensure confidentiality and integrity of the data in transit. They also want to use a single shared secret for simplicity. Which approach best meets their requirements?

Use RSA-2048 to encrypt the file with the recipient's public key.

Use Base64 encoding to obscure the file contents.

Use SHA-256 to hash the file and send the hash along with the file.

Use AES-256 in GCM mode with a pre-shared key.

A security team is designing a system where a server must authenticate itself to clients without exposing its private key. Which approach best achieves this?

Use a symmetric key shared with all clients.

Use a digital certificate signed by a trusted CA.

Use a pre-shared key embedded in the client software.

Use a hash of the server's private key.

Which statement best distinguishes encoding from encryption in the context of network data analysis?

Encoding is always used for data compression, while encryption is used for secrecy.

Encoding provides confidentiality, while encryption provides integrity.

Encoding is used only for text data, while encryption is used only for binary data.

Encoding transforms data to a different format that can be reversed without a key, while encryption requires a key to reverse.

A forensic analyst is analyzing a PCAP and finds that a client and server are using a protocol that uses a public/private key pair for key exchange and a symmetric cipher for data encryption. Which combination of algorithms is being used?

SHA-256 for key exchange and Base64 for data encryption

AES for key exchange and RSA for data encryption

Blowfish for key exchange and 3DES for data encryption

RSA for key exchange and AES for data encryption

GIAC Network Forensic Analyst

Domain 4Objective 1

Encryption and Encoding GNFA Practice Questions (Page 8)

Part of the Advanced Analysis Techniques domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–26 in this domain), expect 8–13 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

7concepts

Questions 36–40

36foundation · easy
In a packet capture, an analyst sees the following URI: '/search?q=hello%20world'. What does '%20' represent?
Select an answer first
37application · medium
A security team is designing a solution to securely transfer files between two servers over the internet. They need to ensure confidentiality and integrity of the data in transit. They also want to use a single shared secret for simplicity. Which approach best meets their requirements?
Select an answer first
38expert · hard
A security team is designing a system where a server must authenticate itself to clients without exposing its private key. Which approach best achieves this?
Select an answer first
39foundation · easy
Which statement best distinguishes encoding from encryption in the context of network data analysis?
Select an answer first
40application · medium
A forensic analyst is analyzing a PCAP and finds that a client and server are using a protocol that uses a public/private key pair for key exchange and a symmetric cipher for data encryption. Which combination of algorithms is being used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GNFA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GNFA” is a trademark of its owner, used for identification only.