A company is considering deploying a forward proxy server to filter employee web traffic. The security team wants to block access to certain categories of websites and also cache frequently accessed content to reduce bandwidth. However, some employees use applications that do not support proxy configuration. Which approach best addresses this limitation?

Use a network access control (NAC) system to block non-compliant applications

Deploy a transparent proxy that intercepts traffic without requiring client configuration

Require all employees to configure their browsers to use the proxy

Deploy a web application firewall (WAF) to filter web traffic

A hospital's network team is deploying a new monitoring device on the segment between the core switch and the internet firewall. The device must be able to detect known attack signatures in real time, but the hospital's compliance policy explicitly prohibits any inline device that could drop legitimate traffic. Which device should they deploy?

A stateful firewall with logging enabled on the outside interface

An inline intrusion prevention system (IPS) configured in fail-open mode

A proxy server configured to forward all HTTP traffic to the security team

A network tap connected to an intrusion detection system (IDS)

Which device can cache frequently requested web content to reduce bandwidth usage and improve response times for users?

Intrusion Prevention System (IPS)

A company's security team is replacing a legacy packet-filtering firewall. The new device must block traffic based on application identity (e.g., allow Salesforce but block other web-based CRM tools), while also inspecting payloads for known attack signatures. The team wants to minimize the number of separate appliances to manage. Which type of device best meets these requirements?

A next-generation firewall (NGFW) with integrated intrusion prevention

A stateful firewall with access control lists

A web application firewall (WAF) deployed in front of the web servers

A network access control (NAC) appliance enforcing endpoint compliance

Which security device is capable of identifying and controlling traffic based on the application being used, regardless of the port, while also providing traditional firewall functions?

Next-Generation Firewall (NGFW)

Intrusion Detection System (IDS)

GIAC Security Essentials

Domain 2Objective 2

Network Security Devices GSEC Practice Questions (Page 1)

Part of the Network Security domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 4–7 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

13concepts

Questions 1–5

1expert · hard
A company is considering deploying a forward proxy server to filter employee web traffic. The security team wants to block access to certain categories of websites and also cache frequently accessed content to reduce bandwidth. However, some employees use applications that do not support proxy configuration. Which approach best addresses this limitation?
Select an answer first
2application · medium
A hospital's network team is deploying a new monitoring device on the segment between the core switch and the internet firewall. The device must be able to detect known attack signatures in real time, but the hospital's compliance policy explicitly prohibits any inline device that could drop legitimate traffic. Which device should they deploy?
Select an answer first
3foundation · easy
Which device can cache frequently requested web content to reduce bandwidth usage and improve response times for users?
Select an answer first
4application · medium
A company's security team is replacing a legacy packet-filtering firewall. The new device must block traffic based on application identity (e.g., allow Salesforce but block other web-based CRM tools), while also inspecting payloads for known attack signatures. The team wants to minimize the number of separate appliances to manage. Which type of device best meets these requirements?
Select an answer first
5foundation · easy
Which security device is capable of identifying and controlling traffic based on the application being used, regardless of the port, while also providing traditional firewall functions?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Network Security Devices GSEC Practice Questions (Page 1)

Questions 1–5

Which device can cache frequently requested web content to reduce bandwidth usage and improve response times for users?

Which security device is capable of identifying and controlling traffic based on the application being used, regardless of the port, while also providing traditional firewall functions?

Keep studying — Network Security