A company's security policy requires that known exploit attempts be automatically blocked in real time, not just logged for later review. Which device should be deployed inline at the network perimeter?

A security information and event management (SIEM) system

An intrusion prevention system (IPS)

A network tap with a packet analyzer

An intrusion detection system (IDS)

A company is replacing its legacy firewall with a device that must enforce policies based on the specific application (e.g., allow Slack but block other messaging apps), while also providing intrusion prevention and the ability to decrypt and inspect SSL/TLS traffic. The company has a limited budget and wants to minimize the number of devices. Which device should be selected?

A stateful firewall with an external IPS

A unified threat management (UTM) appliance with content filtering

A web application firewall (WAF) with SSL/TLS offloading

A next-generation firewall (NGFW) with SSL/TLS inspection and IPS

A hospital wants to ensure that only devices with up-to-date antivirus software and the latest operating system patches can connect to its internal network. The security team needs a solution that checks each device's compliance before granting network access and can quarantine non-compliant devices. Which device should be implemented?

A network access control (NAC) system

A proxy server with content filtering

A next-generation firewall (NGFW) with application control

An intrusion prevention system (IPS) inline at the network core

Which security device combines multiple security functions, such as firewall, IDS/IPS, antivirus, and content filtering, into a single appliance?

Unified Threat Management (UTM) device

A network administrator is configuring a firewall to allow outbound web traffic from internal users. The firewall must allow return traffic for established connections but block all unsolicited inbound traffic. Which firewall type is best suited for this?

A web application firewall (WAF)

A stateless packet-filtering firewall

GIAC Security Essentials

Domain 2Objective 2

Network Security Devices GSEC Practice Questions (Page 6)

Part of the Network Security domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 4–7 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

13concepts

Questions 26–30

26application · medium
A company's security policy requires that known exploit attempts be automatically blocked in real time, not just logged for later review. Which device should be deployed inline at the network perimeter?
Select an answer first
27expert · hard
A company is replacing its legacy firewall with a device that must enforce policies based on the specific application (e.g., allow Slack but block other messaging apps), while also providing intrusion prevention and the ability to decrypt and inspect SSL/TLS traffic. The company has a limited budget and wants to minimize the number of devices. Which device should be selected?
Select an answer first
28application · medium
A hospital wants to ensure that only devices with up-to-date antivirus software and the latest operating system patches can connect to its internal network. The security team needs a solution that checks each device's compliance before granting network access and can quarantine non-compliant devices. Which device should be implemented?
Select an answer first
29foundation · easy
Which security device combines multiple security functions, such as firewall, IDS/IPS, antivirus, and content filtering, into a single appliance?
Select an answer first
30application · medium
A network administrator is configuring a firewall to allow outbound web traffic from internal users. The firewall must allow return traffic for established connections but block all unsolicited inbound traffic. Which firewall type is best suited for this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Network Security Devices GSEC Practice Questions (Page 6)

Questions 26–30

A company's security policy requires that known exploit attempts be automatically blocked in real time, not just logged for later review. Which device should be deployed inline at the network perimeter?

Which security device combines multiple security functions, such as firewall, IDS/IPS, antivirus, and content filtering, into a single appliance?

A network administrator is configuring a firewall to allow outbound web traffic from internal users. The firewall must allow return traffic for established connections but block all unsolicited inbound traffic. Which firewall type is best suited for this?

Keep studying — Network Security