A company is designing its network to ensure that a failure of a single switch does not cause an outage for critical servers. Which design best achieves this goal?

Place critical servers in different VLANs on the same switch.

Connect each critical server to two different switches using NIC teaming, and configure the switches with a redundancy protocol like spanning tree or link aggregation.

Connect all critical servers to a single high-end switch with redundant power supplies.

Use a single switch but configure redundant uplinks to the core router.

A company allows employees to work from home and needs to provide secure remote access to internal applications. They want to enforce multi-factor authentication and ensure that remote users can only reach the specific application servers they need. Which solution best meets these requirements?

Expose the internal application servers directly to the internet and require users to use a strong password.

Provide employees with a VPN client but do not integrate MFA, relying on the corporate password policy.

Use a remote desktop gateway without MFA and allow access to all internal resources.

Deploy a VPN concentrator with IPsec or SSL/TLS, integrate it with the corporate identity provider for MFA, and use firewall rules to restrict VPN users to specific application servers.

A security architect is designing a network for a hospital that must comply with strict data privacy regulations. The hospital has a mix of IoT medical devices, clinical workstations, and administrative systems. They want to minimize the risk of a compromised IoT device leading to access to patient records. Which segmentation strategy is most effective?

Use a single VLAN for all medical devices and clinical workstations to simplify management.

Implement MAC address filtering on the network to only allow known devices.

Create separate VLANs for IoT devices, clinical systems, and administrative systems, with firewall rules that only allow necessary communication between them.

Place all devices on a single flat network and rely on endpoint protection on each device.

What is the primary purpose of a VPN in secure remote access?

To hide the user's IP address from websites

To replace the need for multi-factor authentication

To encrypt traffic between a remote user and the corporate network

To increase the speed of the remote user's internet connection

What is the primary goal of redundancy in network architecture?

To increase the speed of the network

To simplify network configuration

To reduce the cost of network equipment

To ensure availability by providing alternate paths or components in case of failure

GIAC Security Essentials

Domain 2Objective 1

Defensible Network Architecture GSEC Practice Questions (Page 5)

Part of the Network Security domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 4–7 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

8concepts

Questions 21–25

21application · medium
A company is designing its network to ensure that a failure of a single switch does not cause an outage for critical servers. Which design best achieves this goal?
Select an answer first
22application · medium
A company allows employees to work from home and needs to provide secure remote access to internal applications. They want to enforce multi-factor authentication and ensure that remote users can only reach the specific application servers they need. Which solution best meets these requirements?
Select an answer first
23expert · hard
A security architect is designing a network for a hospital that must comply with strict data privacy regulations. The hospital has a mix of IoT medical devices, clinical workstations, and administrative systems. They want to minimize the risk of a compromised IoT device leading to access to patient records. Which segmentation strategy is most effective?
Select an answer first
24foundation · easy
What is the primary purpose of a VPN in secure remote access?
Select an answer first
25foundation · easy
What is the primary goal of redundancy in network architecture?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.