What is a primary benefit of centralizing DHCP management in a cloud environment?

It allows for consistent IP address allocation and configuration across multiple networks.

It provides DNS resolution for all cloud resources.

It eliminates the need for any network routing configuration.

It automatically encrypts all network traffic.

Which cloud provider service is commonly used to centralize DNS in a cloud environment?

Cloud DNS (e.g., AWS Route 53, Azure DNS)

A security team is centralizing logs from multiple cloud accounts and on-premises systems. They need to ensure that logs are tamper-evident and that access to the log repository is strictly controlled. They also want to minimize the risk of an attacker deleting logs. Which architecture is most appropriate?

Send all logs to a single Log Analytics workspace with contributor permissions granted to the security team.

Use Azure Monitor metrics and alerts to detect anomalies instead of storing raw logs.

Export logs to Azure Storage with immutable storage and use Azure RBAC with least-privilege roles for access.

Store logs on a network-attached storage (NAS) appliance in a datacenter.

A financial institution is required to retain network logs for seven years and must ensure that logs cannot be altered by attackers. They are centralizing logging in Azure. What should they implement?

Export logs to Azure Storage with immutable storage policy and retention of seven years.

Send logs to a Log Analytics workspace with default retention settings.

Use Azure Monitor metrics only, as they are sufficient for compliance.

Store logs on a single VM's local disk with backups.

A large enterprise is centralizing DNS resolution for thousands of VMs across multiple VNets. They expect high query volume and need low latency. They also want to minimize operational overhead. Which DNS architecture should they choose?

Configure a single DNS VM in the hub VNet to handle all queries.

Deploy a cluster of DNS VMs in each spoke VNet to serve local queries.

Use Azure Public DNS zones for all internal names.

Use Azure Private DNS zones with auto-registration and link all VNets to the zones.

GIAC Cloud Security Architecture and Design

Domain 2Objective 1

Centralizing Shared Network Services GCAD Practice Questions (Page 5)

Part of the Network Architecture and Security domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 3–5 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

12concepts

Questions 21–25

21foundation · easy
What is a primary benefit of centralizing DHCP management in a cloud environment?
Select an answer first
22foundation · easy
Which cloud provider service is commonly used to centralize DNS in a cloud environment?
Select an answer first
23expert · hard
A security team is centralizing logs from multiple cloud accounts and on-premises systems. They need to ensure that logs are tamper-evident and that access to the log repository is strictly controlled. They also want to minimize the risk of an attacker deleting logs. Which architecture is most appropriate?
Select an answer first
24application · medium
A financial institution is required to retain network logs for seven years and must ensure that logs cannot be altered by attackers. They are centralizing logging in Azure. What should they implement?
Select an answer first
25application · medium
A large enterprise is centralizing DNS resolution for thousands of VMs across multiple VNets. They expect high query volume and need low latency. They also want to minimize operational overhead. Which DNS architecture should they choose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCAD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCAD” is a trademark of its owner, used for identification only.