How can centralized network services help meet compliance requirements?

By automatically encrypting all data in transit.

By providing a single point to enforce and audit security policies.

By storing all data in a single location.

By eliminating the need for any external audits.

A healthcare company is centralizing DNS and logging services in a cloud environment. They must comply with HIPAA, which requires encryption of data in transit and at rest. They also need to ensure that DNS queries are not leaked to external parties. What should they do?

Use a third-party DNS service that supports DNS-over-HTTPS (DoH) and encrypt all DNS queries.

Use the cloud provider's default DNS service and rely on network security groups to prevent external DNS queries.

Use the cloud provider's managed DNS service and enable DNSSEC, and use a private DNS zone for internal resolution.

Deploy a private DNS resolver in the VNet and configure all VMs to use it, and enable DNS logging to a central log store with encryption at rest.

A company is using AWS Organizations with multiple accounts. They want to centralize network security services such as AWS Network Firewall and Route 53 Resolver DNS firewall. They want to manage these services from a single account and apply them across all VPCs. What is the best approach?

Use AWS Transit Gateway and attach AWS Network Firewall to it, then configure all VPCs to route through the Transit Gateway.

Deploy AWS Network Firewall in each VPC and manage them individually from each account.

Use AWS Firewall Manager to centrally configure and manage AWS Network Firewall and Route 53 Resolver DNS firewall policies across all accounts and VPCs.

Create a central VPC with AWS Network Firewall and route all traffic from other VPCs through it using VPC peering.

A company is migrating its centralized logging from on-premises to Azure. They have a compliance requirement to retain logs for three years and need to ensure that logs are available for analysis during the migration. They also want to minimize the risk of data loss. What migration strategy should they use?

Stop on-premises logging and start sending logs directly to Azure.

Run both on-premises and Azure logging in parallel, then cut over to Azure once validated.

Export all historical logs to Azure Storage and then stop on-premises logging.

Use Azure Site Recovery to replicate on-premises log servers to Azure.

What is a common scalability option for centralized network services?

Disabling logging to improve performance.

Using a single instance with more memory.

Adding more instances and using a load balancer.

Reducing the number of clients to decrease load.

GIAC Cloud Security Architecture and Design

Domain 2Objective 1

Centralizing Shared Network Services GCAD Practice Questions (Page 6)

Part of the Network Architecture and Security domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 3–5 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

12concepts

Questions 26–30

26foundation · easy
How can centralized network services help meet compliance requirements?
Select an answer first
27application · medium
A healthcare company is centralizing DNS and logging services in a cloud environment. They must comply with HIPAA, which requires encryption of data in transit and at rest. They also need to ensure that DNS queries are not leaked to external parties. What should they do?
Select an answer first
28application · medium
A company is using AWS Organizations with multiple accounts. They want to centralize network security services such as AWS Network Firewall and Route 53 Resolver DNS firewall. They want to manage these services from a single account and apply them across all VPCs. What is the best approach?
Select an answer first
29expert · hard
A company is migrating its centralized logging from on-premises to Azure. They have a compliance requirement to retain logs for three years and need to ensure that logs are available for analysis during the migration. They also want to minimize the risk of data loss. What migration strategy should they use?
Select an answer first
30foundation · easy
What is a common scalability option for centralized network services?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCAD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCAD” is a trademark of its owner, used for identification only.