SANS 515 UPDATED FINAL PAPER 2026
COMPLETE QUESTIONS AND ANSWERS
◉ Which of the following types of wireless network communication
is described as low-power, low-bandwidth, and short-range?
A) Zigbee
B) 802.11
C) Bluetooth
D) Infrared Answer: A) Zigbee
◉ Which of the following components are required to collect flow
data?
A) Flow exporter, flow collector, flow analyzer
B) Flow filter, flow controller, flow analyzer
C) Flow importer, flow exporter, flow collector
D) Flow viewer, flow director, flow filter Answer: A) Flow exporter,
flow collector, flow analyzer
◉ Which wireless communication method handles authentication by
using 802.1X and RADIUS?
,A) WPA
B) WPA2 Enterprise
C) WPA2 Personal
D) WEP Answer: B) WPA2 Enterprise
◉ Which of the following is the best practice for remote
connections?
A) Set "ssh authentication-retries" to 0 in the configuration.
B) Use SSHv2 and disable SSHv1.
C) Use the RSA key size 512 bits in configuration.
D) Use telnet or SSHv2. Answer: B) Use SSHv2 and disable SSHv1.
◉ Which of the following are a benefit and a drawback of SLAAC
IPv6 address assignments?
A) Benefit: SLAAC requires no DHCP infrastructure. Drawback:
SLAAC causes privacy concerns.
B) Benefit: SLAAC fixes privacy concerns of IPv6. Drawback: SLAAC
requires DHCP infrastructure.
C) Benefit: SLAAC eliminates the need for IPv6 Global Unicast
temporary addresses. Drawback: SLAAC causes privacy concerns.
,D) Benefit: SLAAC eliminates the need for IPv6 Global Unicast
temporary addresses. Drawback: SLAAC fixes privacy concerns of
IPv6. Answer: A) Benefit: SLAAC requires no DHCP infrastructure.
Drawback: SLAAC causes privacy concerns.
◉ Which considerations should guide the design of network
segmentation?
A) Higher segmentation adds complexity, while insufficient
segmentation can result in an indefensible network.
B) Segmentation should be implemented between systems with the
same classification levels.
C) Higher segmentation increase the defender's visibility, making it
easier to detect adversaries.
D) Segmentation should only focus on prevention. Answer: A)
Higher segmentation adds complexity, while insufficient
segmentation can result in an indefensible network.
◉ What type of proxy allows internal systems access to Internet
resources, or something similar?
A) Reverse
B) Intermediate
C) Hybrid
, D) Forward Answer: D) Forward
◉ Which of the following configuration settings *cannot* be
assigned by DHCPv6?
A) The address prefix length.
B) The DHCP NTP servers option.
C) The domain name servers.
D) The default gateway. Answer: D) The default gateway.
◉ What is a blackhole?
A) A route used to drop traffic sent to specific IP addresses.
B) A TOR node on the dark web.
C) A device implemented to monitor traffic sent to IP darknets.
D) An assigned but unused IP address or IP network. Answer: A) A
route used to drop traffic sent to specific IP addresses.
◉ What additional steps, other than patching the CVE-2018-0171,
should be taken to secure the Cisco Smart Install feature?
A) Configure TYPE 8 or TYPE 9 authentication for Smart Install auto-
logon.
COMPLETE QUESTIONS AND ANSWERS
◉ Which of the following types of wireless network communication
is described as low-power, low-bandwidth, and short-range?
A) Zigbee
B) 802.11
C) Bluetooth
D) Infrared Answer: A) Zigbee
◉ Which of the following components are required to collect flow
data?
A) Flow exporter, flow collector, flow analyzer
B) Flow filter, flow controller, flow analyzer
C) Flow importer, flow exporter, flow collector
D) Flow viewer, flow director, flow filter Answer: A) Flow exporter,
flow collector, flow analyzer
◉ Which wireless communication method handles authentication by
using 802.1X and RADIUS?
,A) WPA
B) WPA2 Enterprise
C) WPA2 Personal
D) WEP Answer: B) WPA2 Enterprise
◉ Which of the following is the best practice for remote
connections?
A) Set "ssh authentication-retries" to 0 in the configuration.
B) Use SSHv2 and disable SSHv1.
C) Use the RSA key size 512 bits in configuration.
D) Use telnet or SSHv2. Answer: B) Use SSHv2 and disable SSHv1.
◉ Which of the following are a benefit and a drawback of SLAAC
IPv6 address assignments?
A) Benefit: SLAAC requires no DHCP infrastructure. Drawback:
SLAAC causes privacy concerns.
B) Benefit: SLAAC fixes privacy concerns of IPv6. Drawback: SLAAC
requires DHCP infrastructure.
C) Benefit: SLAAC eliminates the need for IPv6 Global Unicast
temporary addresses. Drawback: SLAAC causes privacy concerns.
,D) Benefit: SLAAC eliminates the need for IPv6 Global Unicast
temporary addresses. Drawback: SLAAC fixes privacy concerns of
IPv6. Answer: A) Benefit: SLAAC requires no DHCP infrastructure.
Drawback: SLAAC causes privacy concerns.
◉ Which considerations should guide the design of network
segmentation?
A) Higher segmentation adds complexity, while insufficient
segmentation can result in an indefensible network.
B) Segmentation should be implemented between systems with the
same classification levels.
C) Higher segmentation increase the defender's visibility, making it
easier to detect adversaries.
D) Segmentation should only focus on prevention. Answer: A)
Higher segmentation adds complexity, while insufficient
segmentation can result in an indefensible network.
◉ What type of proxy allows internal systems access to Internet
resources, or something similar?
A) Reverse
B) Intermediate
C) Hybrid
, D) Forward Answer: D) Forward
◉ Which of the following configuration settings *cannot* be
assigned by DHCPv6?
A) The address prefix length.
B) The DHCP NTP servers option.
C) The domain name servers.
D) The default gateway. Answer: D) The default gateway.
◉ What is a blackhole?
A) A route used to drop traffic sent to specific IP addresses.
B) A TOR node on the dark web.
C) A device implemented to monitor traffic sent to IP darknets.
D) An assigned but unused IP address or IP network. Answer: A) A
route used to drop traffic sent to specific IP addresses.
◉ What additional steps, other than patching the CVE-2018-0171,
should be taken to secure the Cisco Smart Install feature?
A) Configure TYPE 8 or TYPE 9 authentication for Smart Install auto-
logon.
