A network manager is setting up monitoring for a new office. The manager wants to detect when a switch port is saturated and when a router's CPU is pegged. Which monitoring approach would provide the most useful data for these specific issues?

Deploy an agent on every workstation to report network performance from the endpoint perspective.

Use a packet sniffer on a single switch port to capture all traffic and analyze it.

Enable NetFlow on the routers only to see traffic flows and infer saturation.

Collect SNMP metrics from the switches and routers, including interface utilization and CPU load.

What is the primary reason IPv6 was developed?

To improve the speed of data transmission

To eliminate the need for routing

To provide a larger address space than IPv4

In a basic network, what is the role of a 'link'?

It is the endpoint device that sends or receives data.

It is a protocol that ensures reliable delivery of data.

It is the physical or logical connection that carries data between nodes.

It is a device that forwards data packets between different networks.

A network architect is designing a new office with 300 devices. The available IP space is a single /23 subnet. The architect must separate traffic into at least four broadcast domains, but also wants to minimize routing complexity and preserve as many usable addresses as possible. Which approach best balances these constraints?

Create two /24 subnets, each on a separate VLAN, and route between them.

Use one /23 subnet with four VLANs but no routing between them.

Create four /25 subnets, each on a separate VLAN, and route between them.

Use four /24 subnets, which requires more IP space than the /23 provides.

A web application is experiencing slow response times. The network team suspects that the application is making too many DNS queries and that some queries are timing out. Which protocol change would most directly reduce DNS-related latency?

Switch from UDP to TCP for all DNS queries.

Increase the DNS TTL to zero to force fresh queries.

Implement DNS caching on the local resolver or server.

Use a public DNS server instead of the internal DNS server.

GIAC Security Leadership

Domain 6Objective 1

Networking Concepts for Managers GSLC Practice Questions (Page 9)

Part of the Network and Security Architecture domain, which makes up ~10% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~7–12 in this domain), expect 4–6 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

10concepts

Questions 41–45

41application · medium
A network manager is setting up monitoring for a new office. The manager wants to detect when a switch port is saturated and when a router's CPU is pegged. Which monitoring approach would provide the most useful data for these specific issues?
Select an answer first
42foundation · easy
What is the primary reason IPv6 was developed?
Select an answer first
43foundation · easy
In a basic network, what is the role of a 'link'?
Select an answer first
44expert · hard
A network architect is designing a new office with 300 devices. The available IP space is a single /23 subnet. The architect must separate traffic into at least four broadcast domains, but also wants to minimize routing complexity and preserve as many usable addresses as possible. Which approach best balances these constraints?
Select an answer first
45application · medium
A web application is experiencing slow response times. The network team suspects that the application is making too many DNS queries and that some queries are timing out. Which protocol change would most directly reduce DNS-related latency?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSLC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSLC” is a trademark of its owner, used for identification only.