Centralizing Shared Network Services GCAD Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is a key consideration when migrating centralized network services to the cloud?

   • AMigrate all services at once to minimize disruption.
   • BPlan for a phased migration to reduce risk and validate each step.
   • CKeep the old services running indefinitely without decommissioning.
   • DAvoid any testing to save time.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   How does centralized DHCP integrate with cloud networking?

   • AIt assigns IP addresses to virtual machines and provides configuration such as DNS servers and default gateways.
   • BIt manages the routing tables in the cloud VPC.
   • CIt provides firewall rules for the network.
   • DIt replaces the cloud provider's native IP address management entirely.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the purpose of centralizing identity and authentication services for network access control?

   • ATo eliminate the need for any network segmentation.
   • BTo automatically encrypt all network traffic.
   • CTo manage IP address allocation for network devices.
   • DTo provide a single source of truth for user identities and enforce consistent access policies.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company is centralizing network logs for a multi-cloud environment (AWS and Azure). They need to meet a regulatory requirement to retain logs for 7 years. They also need to provide real-time alerting for security incidents. The log volume is high and variable. They want to minimize cost while meeting these requirements. What is the best approach?

   • AUse cloud-native log services (e.g., CloudWatch Logs, Azure Log Analytics) for real-time alerting, and export logs to low-cost storage (e.g., S3, Azure Blob) with lifecycle policies for 7-year retention.
   • BSend all logs to a central SIEM (e.g., Splunk) and retain them there for 7 years.
   • CUse a self-managed ELK stack with hot-warm-cold storage tiers to balance cost and performance.
   • DStore all logs in a single S3 bucket and use Athena for real-time querying.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security team requires all cloud VMs to use a single, authoritative time source for audit log correlation. They are deploying in a single region and want to ensure high availability without introducing a single point of failure. What is the best way to provide centralized NTP to the VMs?

   • AHave each VM sync directly to public NTP pools on the internet.
   • BDeploy two NTP server VMs in an availability set behind an internal load balancer and point all VMs to the load balancer's IP.
   • CConfigure each VM to use the cloud provider's default time service and periodically audit their time offsets.
   • DUse a single NTP VM with a public IP and configure all VMs to sync to it.
   Reveal Solution Discussion Select an answer first