A company wants to prevent non-compliant devices (e.g., missing antivirus updates) from connecting to the corporate network. Which technology should be implemented?

Intrusion Detection System (IDS)

What is the primary purpose of a load balancer?

Monitor network traffic for suspicious activity

Filter traffic based on security rules

Distribute network traffic across multiple servers to ensure availability and performance

A university wants to implement network access control (NAC) to ensure that only compliant student devices can access the campus network. The NAC system will be deployed at the network edge. The university also wants to allow guests to access the internet but not internal resources. Which NAC configuration best meets these requirements?

Deploy a VPN concentrator for all student devices

Block all non-compliant devices from the network entirely

Place non-compliant and guest devices on a quarantine VLAN with internet-only access

Use a firewall to block all traffic from non-compliant devices

A company is evaluating a next-generation firewall (NGFW) to replace its legacy stateful firewall. The network carries a mix of business-critical applications and peer-to-peer file sharing. The security team wants to allow business applications but block peer-to-peer traffic, even if it uses non-standard ports. Which NGFW capability is essential for this requirement?

Intrusion prevention system (IPS) signatures

Application identification based on deep packet inspection

Virtual private network (VPN) termination capabilities

Stateful packet filtering with strict port-based rules

A company is deploying a VPN concentrator to support remote workers. The security team wants to ensure that remote users can only access specific internal servers, not the entire network. The VPN concentrator will be placed at the network perimeter. Which configuration is necessary to enforce this restriction?

Enable split tunneling on the VPN concentrator

Use a network access control (NAC) system to check endpoint compliance

Configure firewall rules on the VPN concentrator to restrict traffic to specific internal servers

Deploy a load balancer in front of the VPN concentrator

GIAC Security Essentials

Domain 2Objective 2

Network Security Devices GSEC Practice Questions (Page 9)

Part of the Network Security domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 4–7 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

13concepts

Questions 41–45

41foundation · easy
A company wants to prevent non-compliant devices (e.g., missing antivirus updates) from connecting to the corporate network. Which technology should be implemented?
Select an answer first
42foundation · easy
What is the primary purpose of a load balancer?
Select an answer first
43expert · hard
A university wants to implement network access control (NAC) to ensure that only compliant student devices can access the campus network. The NAC system will be deployed at the network edge. The university also wants to allow guests to access the internet but not internal resources. Which NAC configuration best meets these requirements?
Select an answer first
44expert · hard
A company is evaluating a next-generation firewall (NGFW) to replace its legacy stateful firewall. The network carries a mix of business-critical applications and peer-to-peer file sharing. The security team wants to allow business applications but block peer-to-peer traffic, even if it uses non-standard ports. Which NGFW capability is essential for this requirement?
Select an answer first
45expert · hard
A company is deploying a VPN concentrator to support remote workers. The security team wants to ensure that remote users can only access specific internal servers, not the entire network. The VPN concentrator will be placed at the network perimeter. Which configuration is necessary to enforce this restriction?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Network Security Devices GSEC Practice Questions (Page 9)

Questions 41–45

A company wants to prevent non-compliant devices (e.g., missing antivirus updates) from connecting to the corporate network. Which technology should be implemented?

What is the primary purpose of a load balancer?

Keep studying — Network Security