A company's network is divided into multiple VLANs. The security team wants to prevent a compromised host in the DMZ from accessing the internal corporate network. Which control is the most effective?

Configure firewall rules that deny all traffic from the DMZ to the internal network except for specific allowed services.

Use a VLAN access control list (VACL) to filter traffic within the DMZ.

Deploy an intrusion prevention system (IPS) in the DMZ to block malicious traffic.

Encrypt all traffic between the DMZ and the internal network using IPsec.

A web application allows users to upload profile pictures. The security team is concerned about malicious file uploads that could compromise the server. Which combination of application-level controls is most effective?

Rely on client-side JavaScript to check the file extension before upload.

Store uploaded files in a database as BLOBs and display them with the original filename.

Use a web application firewall (WAF) to block requests with suspicious file extensions.

Validate file type and size on the server, store files outside the web root, and serve them from a separate domain.

A hospital network is segmented into a clinical zone and a public Wi-Fi zone. The security team wants to ensure that a compromised device on the public Wi-Fi cannot reach the clinical systems. Which control is the most direct and effective?

Deploy an intrusion detection system on the clinical zone to alert on suspicious traffic.

Enable MAC address filtering on the public Wi-Fi access points.

Require a VPN for all public Wi-Fi users.

Configure a firewall rule that blocks traffic from the public Wi-Fi subnet to the clinical zone subnet.

A company is deploying a new internal application that will be accessed by employees from both the office and remote locations. The application handles sensitive HR data. The security team must ensure that only authorized employees can access the application and that data is protected. Which architecture is most secure?

Expose the application directly to the internet and rely on a strong password policy.

Implement application-level access controls and rely on the corporate firewall.

Place the application behind a VPN and require multi-factor authentication (MFA) for all access.

Use a reverse proxy with IP allowlisting for all access.

In the context of the defense-in-depth principle, what is the primary reason for implementing multiple layers of security controls?

To reduce the need for user training and awareness programs

To allow all traffic to pass through the network without inspection

To ensure that no single point of failure can compromise the entire system

To eliminate the need for regular security updates and patching

GIAC Security Essentials

Domain 1Objective 2

Defense in Depth GSEC Practice Questions (Page 2)

Part of the Foundations of Security domain, which makes up ~11% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–18 in this domain), expect 3–6 from this objective — we provide 55 practice questions to prepare you well beyond it. (estimate)

55questions here

11free pages

9concepts

Questions 6–10

6expert · hard
A company's network is divided into multiple VLANs. The security team wants to prevent a compromised host in the DMZ from accessing the internal corporate network. Which control is the most effective?
Select an answer first
7application · medium
A web application allows users to upload profile pictures. The security team is concerned about malicious file uploads that could compromise the server. Which combination of application-level controls is most effective?
Select an answer first
8application · medium
A hospital network is segmented into a clinical zone and a public Wi-Fi zone. The security team wants to ensure that a compromised device on the public Wi-Fi cannot reach the clinical systems. Which control is the most direct and effective?
Select an answer first
9expert · hard
A company is deploying a new internal application that will be accessed by employees from both the office and remote locations. The application handles sensitive HR data. The security team must ensure that only authorized employees can access the application and that data is protected. Which architecture is most secure?
Select an answer first
10foundation · easy
In the context of the defense-in-depth principle, what is the primary reason for implementing multiple layers of security controls?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.