During encapsulation, what happens to data as it moves down the OSI model from the Application Layer to the Transport Layer?

It is converted into frames and MAC addresses are added

It is encapsulated into IP packets

It is broken into segments and a transport header is added

It is converted into bits for transmission

A company uses a single public IP address for internet access. They have an internal web server that must be accessible from the internet, and they also need to allow internal users to browse the web. Which NAT configuration will support both requirements?

Place the web server in the DMZ with a public IP

Configure port forwarding for the web server and use PAT for outbound traffic

Use static NAT for the web server and dynamic NAT for internal users

A company is migrating its network to IPv6. The network administrator needs to assign addresses to devices automatically and ensure that devices can communicate with the IPv4 internet during the transition. Which two features should the administrator implement?

Stateless Address Autoconfiguration (SLAAC) and NAT64

Static IPv6 addressing and NAT-PT

A small business wants to provide Wi-Fi to customers in their waiting area. They want to isolate customer devices from the internal corporate network to prevent unauthorized access. Which configuration should the administrator implement on the wireless access point?

Set the access point to bridge mode

Create a separate VLAN for guest traffic and apply an access control list

A network administrator is troubleshooting a problem where a user cannot access a specific internal application. The application uses a custom TCP port. The administrator has verified that the server is running and the network path is reachable. Which tool should the administrator use to test whether the specific TCP port is open on the server?

Telnet to the server's IP address on the custom port

Use tracert to the server's IP address

Use nslookup to query the server's hostname

GIAC Security Essentials

Domain 2Objective 3

Networking & Protocols GSEC Practice Questions (Page 3)

Part of the Network Security domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 4–7 from this objective — we provide 64 practice questions to prepare you well beyond it. (estimate)

64questions here

13free pages

18concepts

Questions 11–15

11foundation · easy
During encapsulation, what happens to data as it moves down the OSI model from the Application Layer to the Transport Layer?
Select an answer first
12expert · medium
A company uses a single public IP address for internet access. They have an internal web server that must be accessible from the internet, and they also need to allow internal users to browse the web. Which NAT configuration will support both requirements?
Select an answer first
13application · medium
A company is migrating its network to IPv6. The network administrator needs to assign addresses to devices automatically and ensure that devices can communicate with the IPv4 internet during the transition. Which two features should the administrator implement?
Select an answer first
14application · medium
A small business wants to provide Wi-Fi to customers in their waiting area. They want to isolate customer devices from the internal corporate network to prevent unauthorized access. Which configuration should the administrator implement on the wireless access point?
Select an answer first
15expert · medium
A network administrator is troubleshooting a problem where a user cannot access a specific internal application. The application uses a custom TCP port. The administrator has verified that the server is running and the network path is reachable. Which tool should the administrator use to test whether the specific TCP port is open on the server?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.