A company's network security policy states that all remote access must use multi-factor authentication (MFA). However, a legacy application only supports single-factor authentication over VPN. The compliance team requires that the policy be enforced. Which approach best satisfies both the policy and the need to use the legacy application?

Disable the legacy application until it can be upgraded to support MFA.

Use a VPN that supports MFA and assume the legacy application is protected by the VPN.

Grant an exception for the legacy application and document the risk.

Require MFA for VPN access and allow the legacy application to be accessed only through a jump host that requires MFA.

What is the primary goal of the containment phase in incident response?

To collect evidence for legal proceedings

To prevent further damage by isolating the incident

To restore systems to normal operation

To identify the root cause of the incident

GIAC Security Leadership

Domain 2Objective 2

Managing Network Security GSLC Practice Questions (Page 11)

Part of the Technical Security Management domain, which makes up ~27% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~19–32 in this domain), expect 4–6 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

10concepts

Questions 51–52

51application · medium
A company's network security policy states that all remote access must use multi-factor authentication (MFA). However, a legacy application only supports single-factor authentication over VPN. The compliance team requires that the policy be enforced. Which approach best satisfies both the policy and the need to use the legacy application?
Select an answer first
52foundation · easy
What is the primary goal of the containment phase in incident response?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GSLC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSLC” is a trademark of its owner, used for identification only.

Managing Network Security GSLC Practice Questions (Page 11)

Questions 51–52

What is the primary goal of the containment phase in incident response?

Keep studying — Technical Security Management