CND (312-38) Network Defense Simulation
Test your understanding of large-scale network architectures and roaming connectivity. Learn to identify the specific classifications of macro-networks used in modern logistics, maritime, and defense communications.
Network Scenario
The enterprise network of a global maritime and logistics company relies on continuous monitoring. Fleet vehicles and vessels transition seamlessly between depot Wireless LANs, 5G/LTE cellular networks, and broad satellite coverage (VSAT) while traversing oceans and continents.
You are a Network Security Analyst tasked with ensuring the security policies, such as continuous VPN tunneling and Zero Trust edge authentication, apply uniformly as endpoints roam across these vastly different topologies.
Traffic & Logs
Review the snippet from the Mobile IP Gateway handling fleet connectivity:
Question
Which of the following is a network that supports mobile communications across an arbitrary number of wireless LANs and satellite coverage areas?
Expert Analysis
1. What is happening in the network
The network logs show a mobile endpoint (Node-74) transitioning from a local wireless environment (WLAN_AUTH) directly to a satellite communication link (SAT_COM_LINK). The infrastructure is utilizing Mobile IP and continuous IPsec VPNs to maintain a secure, uninterrupted session despite high latency and changing physical network mediums.
2. Identify behavior
This behavior describes roaming across fundamentally different geographic and technological boundaries. It is not limited to a single campus or city, but spans across global satellite infrastructure.
3. Why correct answer is correct
C. GAN (Global Area Network) is correct. A GAN supports mobile communications across multiple wireless LANs, satellite coverage areas, and other networks. It allows users to roam between different networks (e.g., from Wi-Fi to cellular to satellite) while maintaining seamless connectivity.
4. Why others are wrong
A. LAN (Local Area Network): Geographically limited to a small area like a single building or campus. Does not scale to satellite coverage.
B. WAN (Wide Area Network): Covers a broad area (like a country or continent) using leased telecommunication lines, but traditionally refers to fixed point-to-point interconnects rather than arbitrary, seamless mobile roaming across diverse wireless/satellite mediums.
D. HAN (Home Area Network): Specifically refers to a network contained within a user's home (connecting smart devices, PCs, etc.).
5. Defensive action
When defending a GAN, security controls must account for rapid changes in IP addressing, medium-specific vulnerabilities, and latency. Implement robust Mobile Device Management (MDM), always-on VPNs with persistent state capabilities (like IKEv2/MOBIKE), and adjust IDS/IPS thresholds to prevent false positives caused by satellite latency spikes (as seen in the logs).
MINI LESSON: Securing Global Architectures
- MOBIKE (IKEv2 Mobility and Multihoming): Essential for VPNs in a GAN. It allows an IPsec VPN tunnel to remain active even if the client's IP address changes during a network handoff.
- Latency & Timeouts: Satellite links inherently introduce 500-700ms of latency. Firewalls and IDS/IPS must have custom timeout profiles to prevent dropping legitimate connections due to perceived unresponsiveness.
- Encryption Overhead: Ensuring strong encryption (ESP with AES-GCM) is vital over public or interceptable links (like SATCOM), but MTU sizes must be carefully managed to avoid fragmentation across varied network boundaries.
Explore more CND simulations
Enhance your network defense skills with more practical, hands-on scenarios.
View Practice Tests