An organization is designing its network to be resilient against a distributed denial-of-service (DDoS) attack targeting its internet-facing services. They have a limited budget and need to balance cost with availability. Which approach provides the most cost-effective resilience?

Use a cloud-based DDoS protection service that scrubs traffic before it reaches the on-premises network, and maintain a redundant internet connection.

Rely on the ISP's basic DDoS protection that is included with the internet connection.

Deploy an on-premises DDoS mitigation appliance with a large pipe.

Purchase additional bandwidth from the ISP to absorb the attack traffic.

What is the primary goal of internal network hardening?

To simplify network administration

To increase network bandwidth and performance

To reduce the attack surface and mitigate lateral movement

To ensure compliance with external regulations

A hospital needs to isolate its medical devices (IoT) from the main IT network to prevent malware from spreading to patient monitors. The devices need to send data to a central server on the IT network. Which design best meets this need?

Disable the network interfaces on the medical devices to prevent infection.

Connect medical devices to the same VLAN as the IT network for simplicity.

Use a DMZ for medical devices and allow all traffic to the IT network.

Place medical devices in a separate IoT VLAN and allow only specific outbound traffic to the central server via firewall rules.

GIAC Security Essentials

Domain 2Objective 1

Defensible Network Architecture GSEC Practice Questions (Page 9)

Part of the Network Security domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 4–7 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

8concepts

Questions 41–45

41expert · hard
An organization is designing its network to be resilient against a distributed denial-of-service (DDoS) attack targeting its internet-facing services. They have a limited budget and need to balance cost with availability. Which approach provides the most cost-effective resilience?
Select an answer first
42foundation · easy
Which principle is best described as placing multiple overlapping security controls so that if one fails or is bypassed, another control still provides protection?
Select an answer first
43foundation · easy
Which principle ensures that users and processes are granted only the minimum access rights necessary to perform their job functions?
Select an answer first
44foundation · easy
What is the primary goal of internal network hardening?
Select an answer first
45application · medium
A hospital needs to isolate its medical devices (IoT) from the main IT network to prevent malware from spreading to patient monitors. The devices need to send data to a central server on the IT network. Which design best meets this need?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Defensible Network Architecture GSEC Practice Questions (Page 9)

Questions 41–45

An organization is designing its network to be resilient against a distributed denial-of-service (DDoS) attack targeting its internet-facing services. They have a limited budget and need to balance cost with availability. Which approach provides the most cost-effective resilience?

Which principle is best described as placing multiple overlapping security controls so that if one fails or is bypassed, another control still provides protection?

Which principle ensures that users and processes are granted only the minimum access rights necessary to perform their job functions?

What is the primary goal of internal network hardening?

A hospital needs to isolate its medical devices (IoT) from the main IT network to prevent malware from spreading to patient monitors. The devices need to send data to a central server on the IT network. Which design best meets this need?

Keep studying — Network Security