What is the primary function of a Security Information and Event Management (SIEM) system?

Distribute traffic across servers

Filter traffic based on security rules

Collect and analyze security events from various devices for centralized monitoring and incident response

A small business with a limited IT budget wants to replace several separate security appliances (firewall, antivirus gateway, content filter) with a single device that provides all these functions. The business also wants to include intrusion prevention. Which device best fits this requirement?

A unified threat management (UTM) appliance

A network access control (NAC) appliance

A stateful firewall with logging

An e-commerce company has a cluster of web servers behind a load balancer. During peak shopping season, traffic spikes cause some servers to become overloaded while others remain underutilized. The company wants to ensure that all servers are used efficiently and that no single server becomes a bottleneck. Which load-balancing method is most appropriate?

Sticky sessions with a single server

Round-robin load balancing without health checks

Least-connections load balancing with health checks

Which system is used to aggregate logs from firewalls, servers, and applications to provide a centralized view of security events?

Intrusion Detection System (IDS)

Which network security device is specifically designed to monitor network traffic for signs of malicious activity and generate alerts, without taking action to block the traffic?

Intrusion Detection System (IDS)

Intrusion Prevention System (IPS)

GIAC Security Essentials

Domain 2Objective 2

Network Security Devices GSEC Practice Questions (Page 10)

Part of the Network Security domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 4–7 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

13concepts

Questions 46–50

46foundation · easy
What is the primary function of a Security Information and Event Management (SIEM) system?
Select an answer first
47application · medium
A small business with a limited IT budget wants to replace several separate security appliances (firewall, antivirus gateway, content filter) with a single device that provides all these functions. The business also wants to include intrusion prevention. Which device best fits this requirement?
Select an answer first
48expert · hard
An e-commerce company has a cluster of web servers behind a load balancer. During peak shopping season, traffic spikes cause some servers to become overloaded while others remain underutilized. The company wants to ensure that all servers are used efficiently and that no single server becomes a bottleneck. Which load-balancing method is most appropriate?
Select an answer first
49foundation · easy
Which system is used to aggregate logs from firewalls, servers, and applications to provide a centralized view of security events?
Select an answer first
50foundation · easy
Which network security device is specifically designed to monitor network traffic for signs of malicious activity and generate alerts, without taking action to block the traffic?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.