
GIAC Security Leadership
Domain 3Objective 2
Network Monitoring for Managers GSLC Practice Questions (Page 4)
Part of the Security Operations and Incident Management domain, which makes up ~20% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~14–24 in this domain), expect 4–6 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)
52questions here
11free pages
7concepts
Questions 16–20
- 16
A manager needs to monitor a network that carries sensitive customer data. The organization must comply with a regulation that requires monitoring of all access to this data. The manager is considering using NetFlow for monitoring. What is the main limitation of NetFlow for this requirement?
Select an answer first - 17
A network manager is troubleshooting a performance issue. The monitoring data shows high packet loss on a critical link, but latency is normal. The manager must decide whether to replace the link or investigate further. What is the most appropriate action?
Select an answer first - 18
Which of the following best describes the importance of network monitoring for operational continuity?
Select an answer first - 19
A manager is evaluating a monitoring solution that provides both security and performance monitoring. The solution uses SNMP for device health and a signature-based IDS for security. The manager is concerned about missing unknown attacks. What additional capability should the manager consider?
Select an answer first - 20
A network manager is analyzing monitoring data and sees that a server's average latency has increased from 10 ms to 50 ms over the past month, but bandwidth utilization is stable. The server is critical to a business application. The manager must decide whether to investigate or accept the change. What is the most appropriate action?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSLC” is a trademark of its owner, used for identification only.