A company is migrating its on-premises DNS infrastructure to Azure. They have multiple VNets that need to resolve each other's private resources and also need to resolve on-premises hosts via an existing VPN. They want to minimize administrative overhead and avoid managing DNS servers in the cloud. Which approach should they take?

Deploy a pair of Windows Server DNS VMs in a hub VNet and configure them as custom DNS servers on all VNets.

Use Azure Private DNS zones linked to all VNets, with a DNS forwarder to on-premises for hybrid resolution.

Configure each VNet to use Azure-provided DNS and rely on Azure's automatic resolution for all resources.

Create a single Azure Public DNS zone and delegate all VNet names to it.

What is a key design principle for ensuring high availability of centralized network services?

Disable automatic failover to maintain control.

Deploy the service in a single availability zone to reduce complexity.

Place the service on a single powerful server to avoid distribution issues.

Use redundant instances across multiple availability zones.

Which of the following is a typical benefit of centralizing shared network services in a multi-account or multi-VPC cloud environment?

It automatically increases the bandwidth of all network connections.

It allows each VPC to have its own independent DNS root.

It removes the need for any network monitoring.

It simplifies compliance auditing by providing a single point of control and visibility.

A company is migrating its centralized logging infrastructure from on-premises to the cloud. They have a large volume of logs and need to maintain compliance with data residency requirements. They also want to minimize downtime during the migration. What is the best migration strategy?

Use a third-party migration tool to copy logs to the cloud and then switch over, but do not validate the cloud logging system.

Cut over all logging to the cloud at once and decommission the on-premises logging system.

Use a cloud-based log archive to store historical logs, but keep real-time logging on-premises.

Use a hybrid logging architecture where logs are sent to both on-premises and cloud, then gradually shift to cloud-only.

A security team is centralizing NTP for all cloud VMs. They have a compliance requirement that all logs must have timestamps within 100 milliseconds of the authoritative time source. They are deploying in a single region with two availability zones. What is the best way to meet this requirement?

Use a single NTP VM in one availability zone.

Configure all VMs to sync directly to public NTP servers on the internet.

Deploy two NTP VMs in different availability zones and configure all VMs to use them as time sources.

Use the cloud provider's default time service and rely on its accuracy.

GIAC Cloud Security Architecture and Design

Domain 2Objective 1

Centralizing Shared Network Services GCAD Practice Questions (Page 1)

Part of the Network Architecture and Security domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 3–5 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

12concepts

Questions 1–5

1application · medium
A company is migrating its on-premises DNS infrastructure to Azure. They have multiple VNets that need to resolve each other's private resources and also need to resolve on-premises hosts via an existing VPN. They want to minimize administrative overhead and avoid managing DNS servers in the cloud. Which approach should they take?
Select an answer first
2foundation · easy
What is a key design principle for ensuring high availability of centralized network services?
Select an answer first
3foundation · easy
Which of the following is a typical benefit of centralizing shared network services in a multi-account or multi-VPC cloud environment?
Select an answer first
4expert · hard
A company is migrating its centralized logging infrastructure from on-premises to the cloud. They have a large volume of logs and need to maintain compliance with data residency requirements. They also want to minimize downtime during the migration. What is the best migration strategy?
Select an answer first
5expert · hard
A security team is centralizing NTP for all cloud VMs. They have a compliance requirement that all logs must have timestamps within 100 milliseconds of the authoritative time source. They are deploying in a single region with two availability zones. What is the best way to meet this requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCAD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCAD” is a trademark of its owner, used for identification only.