Which network security device is designed to inspect traffic and block malicious packets in real time?

Network Access Control (NAC) server

Virtual Private Network (VPN) concentrator

Intrusion Prevention System (IPS)

Intrusion Detection System (IDS)

A company has deployed a next-generation firewall, an intrusion prevention system, and endpoint protection. During a recent incident, an employee clicked a phishing link and entered credentials on a fake login page. Which additional control would most directly address the human factor layer to prevent a recurrence?

Deploy a data loss prevention solution to monitor outbound traffic for credentials.

Add a web content filter that blocks access to known phishing domains.

Increase the frequency of vulnerability scans on internal servers.

Implement a security awareness training program that includes simulated phishing exercises.

A regional bank is deploying a new customer-facing web application that will handle sensitive financial data. The security architect wants to ensure that even if an attacker compromises the web server, the underlying database contents remain protected. Which combination of controls best achieves this objective?

Place a web application firewall in front of the web server and enable SQL injection detection rules.

Encrypt the database files at rest and require separate credentials for database access than those used by the web application.

Segment the database into a separate VLAN and allow only the web server to reach it on port 1433.

Install a host-based intrusion detection system on the database server and monitor for anomalous queries.

A company's endpoints are frequently infected with malware that exploits unpatched software. The security team has already deployed antivirus and a firewall. Which additional host-level control would be most effective in reducing the number of infections?

Enable a pop-up blocker in the web browser.

Implement a patch management process that ensures updates are applied within 48 hours of release.

Deploy a host-based intrusion detection system to alert on suspicious process activity.

Increase the frequency of full disk scans by the antivirus software.

What is the primary purpose of patch management on endpoints?

To improve the performance of the operating system

To replace outdated hardware components

To fix known security vulnerabilities in software

To monitor network traffic for malicious activity

GIAC Security Essentials

Domain 1Objective 2

Defense in Depth GSEC Practice Questions (Page 5)

Part of the Foundations of Security domain, which makes up ~11% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–18 in this domain), expect 3–6 from this objective — we provide 55 practice questions to prepare you well beyond it. (estimate)

55questions here

11free pages

9concepts

Questions 21–25

21foundation · easy
Which network security device is designed to inspect traffic and block malicious packets in real time?
Select an answer first
22application · medium
A company has deployed a next-generation firewall, an intrusion prevention system, and endpoint protection. During a recent incident, an employee clicked a phishing link and entered credentials on a fake login page. Which additional control would most directly address the human factor layer to prevent a recurrence?
Select an answer first
23application · medium
A regional bank is deploying a new customer-facing web application that will handle sensitive financial data. The security architect wants to ensure that even if an attacker compromises the web server, the underlying database contents remain protected. Which combination of controls best achieves this objective?
Select an answer first
24application · medium
A company's endpoints are frequently infected with malware that exploits unpatched software. The security team has already deployed antivirus and a firewall. Which additional host-level control would be most effective in reducing the number of infections?
Select an answer first
25foundation · easy
What is the primary purpose of patch management on endpoints?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Defense in Depth GSEC Practice Questions (Page 5)

Questions 21–25

Which network security device is designed to inspect traffic and block malicious packets in real time?

A company's endpoints are frequently infected with malware that exploits unpatched software. The security team has already deployed antivirus and a firewall. Which additional host-level control would be most effective in reducing the number of infections?

What is the primary purpose of patch management on endpoints?

Keep studying — Foundations of Security