What is the primary purpose of creating multiple subnets within a single virtual network?

To increase the total number of IP addresses available to resources

To enable resources in different subnets to communicate without any routing

To allow resources in different subnets to have overlapping private IP addresses

To group resources with similar security and operational requirements and control traffic between them

A security administrator is troubleshooting a connectivity issue between two VMs in the same VNet but different subnets. The NSG on the source subnet allows outbound traffic, and the NSG on the destination subnet allows inbound traffic. However, the connection is still failing. What should the administrator check next?

Check if the VMs have the same network security group.

Check if there is a route table (UDR) that is directing traffic to a network virtual appliance (NVA) that is blocking the traffic.

Check if the VMs are using the same DNS server.

Check if the VMs are in the same availability set.

When analyzing virtual network logs, which pattern is most indicative of a potential port scan or brute-force attack?

A steady stream of allowed HTTPS traffic to a public web server

A high volume of failed connection attempts from the same external IP to multiple ports on the same destination

An occasional denied connection from an external IP to a closed port

A single connection from a trusted internal IP to a known database port

A security team is implementing a centralized logging solution for all VNets in an organization. They want to ensure that logs are available for incident response and compliance audits. They also want to minimize the number of Log Analytics workspaces. Which design should they use?

Send logs to a storage account and use Azure Data Explorer for analysis.

Send logs to a third-party SIEM and do not use Log Analytics.

Send all NSG flow logs to a single Log Analytics workspace in a central subscription.

Send logs to separate workspaces for each VNet to maintain isolation.

Which Azure feature can be used to analyze NSG flow logs to provide visual maps of traffic flows and identify suspicious activity?

Network Watcher Connection Monitor

GIAC Public Cloud Security

Domain 3Objective 2

Virtual Network Security and Logging GPCS Practice Questions (Page 2)

Part of the Network and Compliance Security domain, which makes up ~19% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 5–8 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

6concepts

Questions 6–10

6foundation · easy
What is the primary purpose of creating multiple subnets within a single virtual network?
Select an answer first
7expert · hard
A security administrator is troubleshooting a connectivity issue between two VMs in the same VNet but different subnets. The NSG on the source subnet allows outbound traffic, and the NSG on the destination subnet allows inbound traffic. However, the connection is still failing. What should the administrator check next?
Select an answer first
8foundation · easy
When analyzing virtual network logs, which pattern is most indicative of a potential port scan or brute-force attack?
Select an answer first
9expert · hard
A security team is implementing a centralized logging solution for all VNets in an organization. They want to ensure that logs are available for incident response and compliance audits. They also want to minimize the number of Log Analytics workspaces. Which design should they use?
Select an answer first
10foundation · easy
Which Azure feature can be used to analyze NSG flow logs to provide visual maps of traffic flows and identify suspicious activity?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GPCS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPCS” is a trademark of its owner, used for identification only.