A small business wants to deploy an open source proxy to monitor employee web usage. They have a limited budget and need to minimize hardware costs. The proxy will handle about 50 users. Which deployment is most cost-effective while still providing adequate logging?

Install Squid on an existing Linux server that also runs the company's file server.

Deploy HAProxy on a Raspberry Pi to act as a forward proxy.

Use a cloud-based proxy service that charges per user per month.

Purchase a dedicated high-end server with multiple network interfaces to run Squid in transparent mode.

A company needs to provide secure remote access to an internal web application for employees working from home. They also want to log all access to this application for auditing. Which open source proxy solution best meets both needs?

Set up a transparent proxy on the internal network to redirect remote users to the application.

Use Nginx as a forward proxy with client certificate authentication.

Deploy Squid as a forward proxy and require remote employees to configure their browsers to use it.

Use HAProxy as a reverse proxy with SSL termination and access control lists, placed in the DMZ, and log all requests.

A school district uses Squid as a transparent proxy to enforce internet filtering on student devices. They need to block access to social media sites, but allow access for teachers. The proxy must also log all blocked attempts. Which Squid configuration best achieves this?

Configure Squid to block all HTTPS traffic to social media domains using ssl_bump and a regex ACL.

Use a transparent proxy with no authentication and block social media domains for all users, then manually add teacher MAC addresses to an allow list.

Use proxy authentication with LDAP and create an ACL that denies social media domains for the 'students' group while allowing the 'teachers' group.

Use a dstdomain ACL to block social media domains and apply it to all users, then create an allow ACL for teacher IP ranges placed before the block rule.

A company is deploying Squid as a forward proxy. They need to block access to a list of 10,000 malicious domains, but the list changes daily. They also need to ensure that legitimate HTTPS traffic is not blocked. Which approach best balances performance and accuracy?

Use Squid's external ACL to query a local database that is updated daily

Enable SSL bump to inspect all HTTPS traffic

Use a regex ACL to match all domains

Hardcode the domain list in squid.conf and restart daily

GIAC Network Forensic Analyst

Domain 3Objective 1

Open Source Network Security Proxies GNFA Practice Questions (Page 9)

Part of the Security Controls and Monitoring domain, which makes up ~25% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–30 in this domain), expect 9–15 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

6concepts

Questions 41–45

41application · medium
A small business wants to deploy an open source proxy to monitor employee web usage. They have a limited budget and need to minimize hardware costs. The proxy will handle about 50 users. Which deployment is most cost-effective while still providing adequate logging?
Select an answer first
42expert · hard
A company needs to provide secure remote access to an internal web application for employees working from home. They also want to log all access to this application for auditing. Which open source proxy solution best meets both needs?
Select an answer first
43application · medium
A school district uses Squid as a transparent proxy to enforce internet filtering on student devices. They need to block access to social media sites, but allow access for teachers. The proxy must also log all blocked attempts. Which Squid configuration best achieves this?
Select an answer first
44expert · hard
A company is deploying Squid as a forward proxy. They need to block access to a list of 10,000 malicious domains, but the list changes daily. They also need to ensure that legitimate HTTPS traffic is not blocked. Which approach best balances performance and accuracy?
Select an answer first
45foundation · easy
Which open source proxy is commonly used as a reverse proxy and load balancer for HTTP and TCP traffic?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GNFA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GNFA” is a trademark of its owner, used for identification only.