What is the primary purpose of network segmentation?

To eliminate the need for firewalls and other security controls

To limit the spread of a security breach by isolating network segments

To simplify network administration by centralizing management

To increase network speed by reducing congestion

A company is implementing a new network security policy that requires all sensitive data to be encrypted in transit. The network team is configuring a VPN for remote access. Which configuration best supports the confidentiality of data in transit?

Use IPsec with strong encryption algorithms and ensure that all remote access traffic is routed through the VPN tunnel.

Configure the VPN to use a weak encryption algorithm to reduce latency.

Rely on the remote user's personal firewall to encrypt traffic.

Use a VPN that only encrypts the authentication process but allows data to travel in plaintext.

A security team is deploying an intrusion detection system (IDS) to monitor a critical network segment. The team wants to detect suspicious activity without affecting network performance. Which deployment mode should they choose?

Passive mode using a network tap or SPAN port

Inline mode with fail-closed configuration

Host-based IDS on every server in the segment

Inline mode with fail-open configuration

A small business experiences a ransomware infection that encrypted files on several file servers. The investigation shows the initial infection occurred when an employee opened a malicious email attachment. The business had no network segmentation and all servers were in the same VLAN. Which combination of controls would most effectively reduce the risk of a similar incident?

Train employees to recognize phishing emails and require them to report suspicious messages.

Perform regular backups and store them offline to enable recovery after an infection.

Install antivirus on all workstations and enable Windows Defender Firewall.

Deploy an email gateway with attachment sandboxing and segment the network to isolate file servers from workstations.

Which phase of the incident response lifecycle involves identifying the scope of an incident and determining the affected systems?

Containment, eradication, and recovery

GIAC Security Leadership

Domain 2Objective 2

Managing Network Security GSLC Practice Questions (Page 5)

Part of the Technical Security Management domain, which makes up ~27% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~19–32 in this domain), expect 4–6 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

10concepts

Questions 21–25

21foundation · easy
What is the primary purpose of network segmentation?
Select an answer first
22application · medium
A company is implementing a new network security policy that requires all sensitive data to be encrypted in transit. The network team is configuring a VPN for remote access. Which configuration best supports the confidentiality of data in transit?
Select an answer first
23application · medium
A security team is deploying an intrusion detection system (IDS) to monitor a critical network segment. The team wants to detect suspicious activity without affecting network performance. Which deployment mode should they choose?
Select an answer first
24application · medium
A small business experiences a ransomware infection that encrypted files on several file servers. The investigation shows the initial infection occurred when an employee opened a malicious email attachment. The business had no network segmentation and all servers were in the same VLAN. Which combination of controls would most effectively reduce the risk of a similar incident?
Select an answer first
25foundation · easy
Which phase of the incident response lifecycle involves identifying the scope of an incident and determining the affected systems?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSLC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSLC” is a trademark of its owner, used for identification only.