A financial firm is redesigning its network to protect a database containing customer PII. The database must be accessible only to the application server tier, and the application servers must be accessible only from the web tier. The web tier is the only tier exposed to the internet. Which segmentation design best meets these requirements?

Create three separate VLANs (web, app, DB) with firewall rules allowing only required traffic between adjacent tiers.

Use a single flat network with a stateful firewall at the internet edge only.

Put the database in the DMZ and keep the web and app tiers on the internal network.

Place all tiers in the same VLAN and rely on host-based firewalls on each server to restrict traffic.

What is the primary purpose of a DMZ in a perimeter defense architecture?

To provide a secure area for internal users to access the internet

To host services that are accessible from the internet while isolating them from the internal network

To monitor network traffic for intrusion detection

To store backup data for disaster recovery

In a segmented network, what is the typical trust level of a DMZ (demilitarized zone) compared to the internal network?

Equal trust to the internal network

Higher trust than the internal network

Lower trust than the internal network

GIAC Security Essentials

Domain 2Objective 1

Defensible Network Architecture GSEC Practice Questions (Page 10)

Part of the Network Security domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 4–7 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

8concepts

Questions 46–48

46application · medium
A financial firm is redesigning its network to protect a database containing customer PII. The database must be accessible only to the application server tier, and the application servers must be accessible only from the web tier. The web tier is the only tier exposed to the internet. Which segmentation design best meets these requirements?
Select an answer first
47foundation · easy
What is the primary purpose of a DMZ in a perimeter defense architecture?
Select an answer first
48foundation · easy
In a segmented network, what is the typical trust level of a DMZ (demilitarized zone) compared to the internal network?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Defensible Network Architecture GSEC Practice Questions (Page 10)

Questions 46–48

What is the primary purpose of a DMZ in a perimeter defense architecture?

In a segmented network, what is the typical trust level of a DMZ (demilitarized zone) compared to the internal network?

Keep studying — Network Security