A global company needs to provide remote access to employees in countries with restrictive internet policies. The company wants to ensure that remote access is secure and that employees can access internal resources without being blocked by local censorship. Which solution should be used?

Use standard IPsec VPN with well-known ports.

Use a web-based portal with HTTPS and no additional security.

Use a VPN with obfuscated endpoints that mimic normal HTTPS traffic.

Provide direct RDP access to internal servers.

Which placement is most appropriate for an intrusion prevention system (IPS) in a network architecture?

Out-of-band connected to a switch mirror port

On a separate management network with no traffic flow

Inline between the firewall and the internal network

At the endpoint only, not on the network path

What is the primary purpose of a virtual private network (VPN) in remote access security?

To increase the speed of the remote user's internet connection

To replace the need for authentication on the corporate network

To create an encrypted tunnel that protects data in transit between a remote user and the corporate network

To provide a public IP address for the remote user's device

A retail company experienced a breach that went undetected for months. The security team wants to improve its ability to detect suspicious activity early. They have a limited budget and need to prioritize. Which action should they take first?

Enable logging on all network devices and centralize the logs in a SIEM with alerting rules.

Implement network segmentation to isolate all critical systems.

Purchase an expensive next-generation firewall for every network segment.

Deploy a honeypot to attract attackers and log their activity.

A consulting firm has employees who work from client sites and need to access internal resources. The firm wants to ensure that remote access is secure and that only company-issued laptops can connect. Which solution should be used?

Set up a site-to-site VPN between the client site and the firm's office.

Use a remote desktop gateway that requires only a username and password.

Provide direct RDP access to internal servers from the internet.

Implement a VPN with client certificates installed on company-issued laptops.

GIAC Security Leadership

Domain 6Objective 2

Network Security Architecture GSLC Practice Questions (Page 1)

Part of the Network and Security Architecture domain, which makes up ~10% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~7–12 in this domain), expect 4–6 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

8concepts

Questions 1–5

1expert · hard
A global company needs to provide remote access to employees in countries with restrictive internet policies. The company wants to ensure that remote access is secure and that employees can access internal resources without being blocked by local censorship. Which solution should be used?
Select an answer first
2foundation · easy
Which placement is most appropriate for an intrusion prevention system (IPS) in a network architecture?
Select an answer first
3foundation · easy
What is the primary purpose of a virtual private network (VPN) in remote access security?
Select an answer first
4application · medium
A retail company experienced a breach that went undetected for months. The security team wants to improve its ability to detect suspicious activity early. They have a limited budget and need to prioritize. Which action should they take first?
Select an answer first
5application · medium
A consulting firm has employees who work from client sites and need to access internal resources. The firm wants to ensure that remote access is secure and that only company-issued laptops can connect. Which solution should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSLC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSLC” is a trademark of its owner, used for identification only.