A company uses AWS Organizations with 100 accounts and manages network resources using Terraform. They want to centralize network monitoring and alerting across all accounts and regions. They also want to automate the deployment of monitoring resources. Which approach best meets these requirements?

Use AWS Systems Manager to run a script that sets up monitoring in each account.

Use AWS CloudFormation StackSets to deploy a monitoring stack in each account and region, and aggregate metrics in a central CloudWatch account.

Use Terraform to create monitoring resources in each account manually and use a third-party tool to aggregate logs.

Use AWS Config aggregator to collect configuration data from all accounts and regions.

A media streaming company uses AWS to serve video content to millions of users. They currently use a single Network Load Balancer (NLB) in front of their origin servers. During peak hours, the NLB becomes a bottleneck and users experience buffering. They want to offload traffic from the origin and improve performance for static content. Which solution should they implement?

Add more NLB instances and use Route 53 weighted routing to distribute traffic.

Replace the NLB with an Application Load Balancer and enable HTTP/2.

Use AWS Global Accelerator to route traffic to the NLB and enable client IP preservation.

Place Amazon CloudFront in front of the NLB and configure it to cache video content at edge locations.

In cloud networking, what is the primary purpose of using subnets within a VPC?

To replace the need for security groups

To increase the total number of IP addresses available in the VPC

To allow a VPC to span multiple regions

To provide a way to segment the VPC's IP address space and isolate resources

What is the primary benefit of using Infrastructure as Code (IaC) for provisioning cloud network resources?

It enables consistent and repeatable deployment of network resources

It automatically scales network resources without any configuration

It eliminates the need for network security policies

It allows for manual, step-by-step configuration of each resource

What is the primary purpose of encryption in transit for cloud network traffic?

To protect data from being intercepted while it travels across networks

To provide a static IP address for all network resources

To improve network performance by reducing packet size

To replace the need for network monitoring

GIAC Cloud Security Architecture and Design

Domain 2Objective 4

Managing Cloud Networks at Scale GCAD Practice Questions (Page 4)

Part of the Network Architecture and Security domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 3–5 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

10concepts

Questions 16–20

16expert · hard
A company uses AWS Organizations with 100 accounts and manages network resources using Terraform. They want to centralize network monitoring and alerting across all accounts and regions. They also want to automate the deployment of monitoring resources. Which approach best meets these requirements?
Select an answer first
17application · medium
A media streaming company uses AWS to serve video content to millions of users. They currently use a single Network Load Balancer (NLB) in front of their origin servers. During peak hours, the NLB becomes a bottleneck and users experience buffering. They want to offload traffic from the origin and improve performance for static content. Which solution should they implement?
Select an answer first
18foundation · easy
In cloud networking, what is the primary purpose of using subnets within a VPC?
Select an answer first
19foundation · easy
What is the primary benefit of using Infrastructure as Code (IaC) for provisioning cloud network resources?
Select an answer first
20foundation · easy
What is the primary purpose of encryption in transit for cloud network traffic?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCAD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCAD” is a trademark of its owner, used for identification only.