A startup is developing a new mobile app. The development team stores source code in a cloud repository, and the marketing team stores public product images in the same cloud storage account. The CTO wants to ensure that the source code is protected from unauthorized access, but the product images must be publicly accessible. What is the first step the CTO should take to implement this requirement?

Create two separate storage accounts, one for source code and one for images.

Define a data classification scheme that distinguishes between the source code and the product images.

Ask the cloud provider to recommend a security solution.

Immediately set the storage account to private and create a public CDN for the images.

How can data classification be integrated with resource tagging to enforce data protection policies?

By applying tags that reflect the classification level of the data stored in the resource

By using tags to automatically delete all sensitive data

By using tags to store the actual data content

By replacing data classification with resource tags

A company has a cloud environment with resources tagged by data classification ('Confidential', 'Public') and by environment ('Prod', 'Dev'). The security team wants to ensure that 'Confidential' resources in 'Prod' are backed up daily, while 'Confidential' resources in 'Dev' are backed up weekly. The operations team wants to minimize the number of backup policies. What is the most efficient approach?

Create two backup policies: one for 'Confidential' resources in 'Prod' and one for 'Confidential' resources in 'Dev'.

Create one backup policy for all resources in 'Prod' and another for all resources in 'Dev'.

Create one backup policy for all 'Confidential' resources and apply it to both 'Prod' and 'Dev'.

Manually configure backups for each 'Confidential' resource.

GIAC Cloud Security Architecture and Design

Domain 3Objective 4

Data Classification and Resource Tagging GCAD Practice Questions (Page 5)

Part of the Data Protection and Security domain, which makes up ~19% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 3–4 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

6concepts

Questions 21–25

21application · easy
A startup is developing a new mobile app. The development team stores source code in a cloud repository, and the marketing team stores public product images in the same cloud storage account. The CTO wants to ensure that the source code is protected from unauthorized access, but the product images must be publicly accessible. What is the first step the CTO should take to implement this requirement?
Select an answer first
22foundation · easy
How can data classification be integrated with resource tagging to enforce data protection policies?
Select an answer first
23expert · hard
A company has a cloud environment with resources tagged by data classification ('Confidential', 'Public') and by environment ('Prod', 'Dev'). The security team wants to ensure that 'Confidential' resources in 'Prod' are backed up daily, while 'Confidential' resources in 'Dev' are backed up weekly. The operations team wants to minimize the number of backup policies. What is the most efficient approach?
Select an answer first
24application · easy
A cloud team is implementing a tagging strategy. They want to use tags to identify resources that are part of a specific project. What is the most effective tag key to use?
Select an answer first
25foundation · easy
In cloud resource tagging, what does a tag consist of?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCAD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCAD” is a trademark of its owner, used for identification only.

Data Classification and Resource Tagging GCAD Practice Questions (Page 5)

Questions 21–25

How can data classification be integrated with resource tagging to enforce data protection policies?

A cloud team is implementing a tagging strategy. They want to use tags to identify resources that are part of a specific project. What is the most effective tag key to use?

In cloud resource tagging, what does a tag consist of?

Keep studying — Data Protection and Security