A company uses Azure and has detected a compromised VM that is part of a virtual network. The security team wants to contain the VM while allowing the rest of the network to continue operating. Which containment strategy is MOST effective?

Apply a network security group to the VM's subnet that denies all inbound and outbound traffic.

Move the VM to a different resource group.

Delete the VM's network interface.

Stop the VM from the Azure portal.

GIAC Cloud Security Architecture and Design

Domain 4Objective 3

Incident Response in the Cloud GCAD Practice Questions (Page 8)

Part of the Logging, Monitoring, and Incident Response domain, which makes up ~19% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 3–5 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

9concepts

Questions 36–36

36application · medium
A company uses Azure and has detected a compromised VM that is part of a virtual network. The security team wants to contain the VM while allowing the rest of the network to continue operating. Which containment strategy is MOST effective?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GCAD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCAD” is a trademark of its owner, used for identification only.

Incident Response in the Cloud GCAD Practice Questions (Page 8)

Questions 36–36

A company uses Azure and has detected a compromised VM that is part of a virtual network. The security team wants to contain the VM while allowing the rest of the network to continue operating. Which containment strategy is MOST effective?

Keep studying — Logging, Monitoring, and Incident Response