What is a benefit of integrating centralized network services with cloud provider native services?

It requires all services to be migrated to a different cloud provider.

It allows the organization to avoid using any cloud provider features.

It enables seamless integration with cloud-native identity, logging, and networking capabilities.

It eliminates the need for any network security controls.

What is a key security control for centralized network services?

Restricting administrative access to the service using least privilege.

Disabling logging to reduce data exposure.

Placing the service on the public internet for easy access.

Allowing all users to access the service to simplify management.

A company is designing a hub-and-spoke network in Azure. They want to inspect all traffic between spoke VNets and the internet, and also between spokes, using a centralized firewall. They also want to avoid managing the firewall infrastructure themselves. Which service should they use?

A third-party NVA in each spoke VNet.

Network Security Groups (NSGs) on each subnet in the spokes.

Azure Firewall deployed in the hub VNet with forced tunneling and UDRs on spoke subnets.

Azure Application Gateway with WAF in the hub.

What is the primary role of centralized NTP in a cloud environment?

To encrypt network traffic between cloud resources.

To manage IP address allocation for cloud resources.

To provide a backup for DNS services.

To synchronize clocks across cloud resources to ensure consistent timestamps for logs and authentication.

A company is centralizing DNS using Azure Private DNS zones. They have multiple VNets that need to resolve each other's resources, but they also have overlapping IP address spaces. They want to ensure that resolution works correctly without conflicts. What should they do?

Create separate private DNS zones for each VNet and configure conditional forwarding between them.

Disable DNS resolution between VNets and use IP addresses only.

Use Azure Public DNS zones for each VNet.

Create a single private DNS zone and link all VNets to it.

GIAC Cloud Security Architecture and Design

Domain 2Objective 1

Centralizing Shared Network Services GCAD Practice Questions (Page 9)

Part of the Network Architecture and Security domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 3–5 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

12concepts

Questions 41–45

41foundation · easy
What is a benefit of integrating centralized network services with cloud provider native services?
Select an answer first
42foundation · easy
What is a key security control for centralized network services?
Select an answer first
43application · medium
A company is designing a hub-and-spoke network in Azure. They want to inspect all traffic between spoke VNets and the internet, and also between spokes, using a centralized firewall. They also want to avoid managing the firewall infrastructure themselves. Which service should they use?
Select an answer first
44foundation · easy
What is the primary role of centralized NTP in a cloud environment?
Select an answer first
45expert · hard
A company is centralizing DNS using Azure Private DNS zones. They have multiple VNets that need to resolve each other's resources, but they also have overlapping IP address spaces. They want to ensure that resolution works correctly without conflicts. What should they do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GCAD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCAD” is a trademark of its owner, used for identification only.