Network Security Devices GSEC Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   To protect a public-facing web server while minimizing the impact on internal network performance, where should the web server be placed?

   • AOn the internal network, directly behind the firewall
   • BIn a DMZ (demilitarized zone) between the firewall and the internal network
   • COn a separate network segment with no firewall
   • DOn the internet, outside the firewall
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Where is a firewall typically placed in a network architecture to protect internal resources from external threats?

   • AOnly on the internal network, behind all servers
   • BOnly in front of each individual server
   • CAt the network perimeter, between the internal network and the internet
   • DOnly on the internet side, not connected to the internal network
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company has a growing number of remote employees who need secure access to internal resources. The security team wants to centralize remote access management and ensure all traffic between remote users and the internal network is encrypted. Which device should be deployed at the network perimeter?

   • AA network access control (NAC) appliance
   • BA web application firewall (WAF)
   • CA load balancer
   • DA VPN concentrator
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   An e-commerce company runs a web application on multiple servers to handle high traffic volumes. The company wants to ensure that no single server becomes overwhelmed and that the application remains available even if one server fails. Which device should be placed in front of the server farm?

   • AA VPN concentrator
   • BA network intrusion detection system (IDS)
   • CA web application firewall (WAF)
   • DA load balancer
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A company runs a mission-critical web application on a cluster of servers. The security team wants to ensure high availability and also protect the servers from distributed denial-of-service (DDoS) attacks. The team is considering placing a load balancer in front of the servers. Which additional device or configuration is necessary to effectively mitigate DDoS attacks?

   • ADeploy an intrusion detection system (IDS) on a SPAN port
   • BConfigure the load balancer to block all traffic from unknown IP addresses
   • CDeploy a DDoS protection service or appliance in front of the load balancer
   • DUse a network access control (NAC) system to quarantine attacking devices
   Reveal Solution Discussion Select an answer first