A company allows employees to work from home and needs to provide secure access to internal applications. They want to enforce multi-factor authentication and encrypt all traffic. Which solution best meets these requirements?

Deploy a VPN gateway with IPsec or TLS encryption and integrate it with the company's MFA provider.

Use a remote desktop gateway without additional authentication.

Provide employees with a simple port forwarding rule through the firewall.

Expose internal applications directly to the internet and rely on strong passwords.

What is micro-segmentation in the context of Zero Trust architecture?

Reducing the number of network devices to simplify management

Using smaller IP address ranges to conserve address space

Segmenting the network based on physical location only

Dividing the network into very small zones to enforce security policies at a granular level

A company wants to provide remote access to contractors who use unmanaged devices. They require strong authentication and want to ensure that contractors can only access specific applications, not the entire network. Which solution best meets these requirements?

Use a remote desktop gateway that allows access to any internal server.

Deploy a zero trust network access (ZTNA) solution that provides per-application access with MFA and device posture checks.

Provide contractors with a full-tunnel VPN and require MFA.

Allow contractors to use their own VPN client with a shared password.

What is the primary purpose of network segmentation in a defensible network architecture?

To increase network speed by reducing broadcast domains

To simplify IP address management

To eliminate the need for firewalls

To isolate critical assets and control traffic flow between trust levels

GIAC Security Essentials

Domain 2Objective 1

Defensible Network Architecture GSEC Practice Questions (Page 2)

Part of the Network Security domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 4–7 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

8concepts

Questions 6–10

6application · medium
A company allows employees to work from home and needs to provide secure access to internal applications. They want to enforce multi-factor authentication and encrypt all traffic. Which solution best meets these requirements?
Select an answer first
7foundation · easy
What is micro-segmentation in the context of Zero Trust architecture?
Select an answer first
8expert · hard
A company wants to provide remote access to contractors who use unmanaged devices. They require strong authentication and want to ensure that contractors can only access specific applications, not the entire network. Which solution best meets these requirements?
Select an answer first
9foundation · easy
What is the primary purpose of network segmentation in a defensible network architecture?
Select an answer first
10foundation · easy
Which device is typically placed at the boundary between an organization's internal network and an untrusted external network to filter traffic based on a set of security rules?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.