What is a key advantage of using centralized network management platforms in a multi-account cloud environment?

They automatically resolve all network performance issues

They eliminate the need for any network security policies

They require the use of a single cloud provider

They allow for a single point of control to monitor and configure network resources across accounts

A network operations team is experiencing intermittent packet loss between two VPCs connected via a transit gateway. They have verified that the transit gateway attachment is healthy and there are no route conflicts. They need to identify the cause. Which diagnostic approach should they use?

Use ping and traceroute from an instance in one VPC to an instance in the other VPC.

Enable flow logs on the transit gateway and analyze them for dropped packets.

Check the security group rules on the instances in both VPCs.

Review the route tables in both VPCs to ensure the transit gateway is the next hop.

A company operates a large AWS environment with thousands of EC2 instances across many VPCs. They are experiencing intermittent connectivity issues between instances in different VPCs. The network team has enabled VPC Flow Logs but is overwhelmed by the volume of data. They need to quickly identify the root cause of the connectivity issues. Which approach is most effective?

Deploy a network monitoring agent on every instance to capture packet-level data.

Aggregate flow logs into a central data lake and use a query tool like Amazon Athena to search for patterns of rejected connections.

Use AWS CloudWatch Logs Insights to search for VPC Flow Log entries in real time.

Enable AWS X-Ray on all EC2 instances to trace network requests.

What is the primary purpose of a transit gateway in cloud networking?

To provide a central hub for connecting multiple VPCs and on-premises networks

To encrypt all traffic between VPCs automatically

To replace the need for internet gateways

To provide a dedicated physical connection to a cloud provider

What is the primary purpose of logging in a cloud network?

To automatically block malicious traffic

To provide a record of network activity for troubleshooting and security analysis

To reduce the amount of network traffic

To replace the need for network monitoring

GIAC Cloud Security Architecture and Design

Domain 2Objective 4

Managing Cloud Networks at Scale GCAD Practice Questions (Page 7)

Part of the Network Architecture and Security domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 3–5 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

10concepts

Questions 31–35

31foundation · easy
What is a key advantage of using centralized network management platforms in a multi-account cloud environment?
Select an answer first
32expert · hard
A network operations team is experiencing intermittent packet loss between two VPCs connected via a transit gateway. They have verified that the transit gateway attachment is healthy and there are no route conflicts. They need to identify the cause. Which diagnostic approach should they use?
Select an answer first
33expert · hard
A company operates a large AWS environment with thousands of EC2 instances across many VPCs. They are experiencing intermittent connectivity issues between instances in different VPCs. The network team has enabled VPC Flow Logs but is overwhelmed by the volume of data. They need to quickly identify the root cause of the connectivity issues. Which approach is most effective?
Select an answer first
34foundation · easy
What is the primary purpose of a transit gateway in cloud networking?
Select an answer first
35foundation · easy
What is the primary purpose of logging in a cloud network?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCAD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCAD” is a trademark of its owner, used for identification only.