A company is designing a new network for a research lab that handles sensitive intellectual property. The lab has a mix of Windows and Linux systems, and researchers need to share files with external partners. The security team must balance strong protection with usability. Which architecture best implements defense in depth while meeting the collaboration requirement?

Put the lab on the general corporate network and rely on host firewalls on each system.

Place all lab systems in a dedicated VLAN with a firewall that only allows necessary traffic, and use an encrypted file-sharing service for external partners.

Use a VPN for all external partner access and give partners direct access to the lab network.

Create a DMZ for the lab and allow all outbound traffic to the internet for file sharing.

A legal firm stores client documents on a file server. The compliance team requires that only authorized attorneys can read the documents, and that any unauthorized access attempt is logged. Which set of controls best meets these requirements?

Place the file server behind a firewall and require VPN for remote access.

Install a data loss prevention agent on all attorney workstations.

Implement role-based access control (RBAC) on the file server and enable auditing on the document folders.

Encrypt the file server's hard drives and back up the data daily.

A company is moving its customer database to a cloud provider. The database contains personally identifiable information (PII). The security team must ensure that the data is protected and that the company can meet regulatory requirements for data residency. Which approach is most appropriate?

Encrypt the data with a key managed by the cloud provider and grant all employees access.

Choose a cloud region that meets data residency requirements, encrypt the database at rest and in transit, and implement strict access controls.

Keep the database on-premises to avoid any cloud compliance issues.

Use the cloud provider's default encryption and rely on the provider's compliance certifications.

A hospital is upgrading its security architecture. It must maintain 24/7 availability of patient-critical systems while also protecting against ransomware. The budget is limited. Which combination of controls provides the best balance of protection and availability?

Purchase a cyber insurance policy and focus on compliance reporting.

Implement strict access controls and disable all external network connections to critical systems.

Deploy a next-generation firewall at the perimeter and rely on antivirus on all systems.

Segment the network to isolate critical systems, deploy endpoint detection and response (EDR) on all endpoints, and maintain offline backups.

GIAC Security Essentials

Domain 1Objective 2

Defense in Depth GSEC Practice Questions (Page 9)

Part of the Foundations of Security domain, which makes up ~11% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–18 in this domain), expect 3–6 from this objective — we provide 55 practice questions to prepare you well beyond it. (estimate)

55questions here

11free pages

9concepts

Questions 41–45

41expert · hard
A company is designing a new network for a research lab that handles sensitive intellectual property. The lab has a mix of Windows and Linux systems, and researchers need to share files with external partners. The security team must balance strong protection with usability. Which architecture best implements defense in depth while meeting the collaboration requirement?
Select an answer first
42application · medium
A legal firm stores client documents on a file server. The compliance team requires that only authorized attorneys can read the documents, and that any unauthorized access attempt is logged. Which set of controls best meets these requirements?
Select an answer first
43expert · hard
A company is moving its customer database to a cloud provider. The database contains personally identifiable information (PII). The security team must ensure that the data is protected and that the company can meet regulatory requirements for data residency. Which approach is most appropriate?
Select an answer first
44expert · hard
A hospital is upgrading its security architecture. It must maintain 24/7 availability of patient-critical systems while also protecting against ransomware. The budget is limited. Which combination of controls provides the best balance of protection and availability?
Select an answer first
45foundation · easy
Which data security control ensures that data remains unreadable if it is intercepted during transmission?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Defense in Depth GSEC Practice Questions (Page 9)

Questions 41–45

A legal firm stores client documents on a file server. The compliance team requires that only authorized attorneys can read the documents, and that any unauthorized access attempt is logged. Which set of controls best meets these requirements?

A company is moving its customer database to a cloud provider. The database contains personally identifiable information (PII). The security team must ensure that the data is protected and that the company can meet regulatory requirements for data residency. Which approach is most appropriate?

A hospital is upgrading its security architecture. It must maintain 24/7 availability of patient-critical systems while also protecting against ransomware. The budget is limited. Which combination of controls provides the best balance of protection and availability?

Which data security control ensures that data remains unreadable if it is intercepted during transmission?

Keep studying — Foundations of Security