A company is moving workloads to Azure and wants to use the same corporate credentials for both Azure portal access and VPN authentication to the cloud VNet. They have an on-premises Active Directory. What should they implement?

Deploy a read-only domain controller in Azure and join all VMs to the domain.

Set up a site-to-site VPN and rely on on-premises AD for all authentication.

Create a separate identity store in Azure and manually sync user passwords.

Use Azure AD Connect to sync identities to Azure AD, and enable Azure AD authentication for VPN and portal.

What is a common mechanism to provide redundancy for centralized network services?

Placing all instances in the same subnet.

Disabling health checks to avoid false positives.

Using a single instance with more CPU.

Load balancing across multiple service instances.

Which of the following is a key architectural component for centralizing network logs?

A DNS server to resolve log source names.

An NTP server to timestamp logs.

A DHCP server to assign IP addresses to log sources.

A central log aggregation service that collects logs from multiple sources.

Which of the following is an example of a centralized security service?

A network firewall deployed in a hub VNet that filters traffic for multiple spoke VNets.

A DHCP server that assigns IP addresses.

A separate firewall in each VNet with independent rules.

A DNS server that resolves names.

What is a primary purpose of centralizing logging and monitoring in a cloud architecture?

To provide a single view of security and operational events across the environment.

To automatically remediate all security incidents.

To replace the need for any network security controls.

To provide DNS resolution for all cloud resources.

GIAC Cloud Security Architecture and Design

Domain 2Objective 1

Centralizing Shared Network Services GCAD Practice Questions (Page 2)

Part of the Network Architecture and Security domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 3–5 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

12concepts

Questions 6–10

6application · medium
A company is moving workloads to Azure and wants to use the same corporate credentials for both Azure portal access and VPN authentication to the cloud VNet. They have an on-premises Active Directory. What should they implement?
Select an answer first
7foundation · easy
What is a common mechanism to provide redundancy for centralized network services?
Select an answer first
8foundation · easy
Which of the following is a key architectural component for centralizing network logs?
Select an answer first
9foundation · easy
Which of the following is an example of a centralized security service?
Select an answer first
10foundation · easy
What is a primary purpose of centralizing logging and monitoring in a cloud architecture?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCAD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCAD” is a trademark of its owner, used for identification only.