A company runs a data-intensive application that transfers large amounts of data between two AWS regions every night. They are looking for ways to reduce data transfer costs. Which option would be most effective?

Move the application to a single region to eliminate inter-region transfer.

Use VPC peering between the two regions and route traffic over the AWS backbone.

Use AWS Direct Connect to establish a dedicated connection between the two regions.

Compress the data before transfer and use AWS DataSync to move it between regions.

A company runs a mission-critical application in two AWS regions (us-east-1 and us-west-2) for disaster recovery. They use VPC peering to connect the two VPCs, but they are concerned about the single point of failure if the peering connection fails. They want a more resilient and scalable connectivity option that also allows them to centralize network management. Which solution should they implement?

Create multiple VPC peering connections between the two VPCs to provide redundancy.

Replace VPC peering with an AWS Transit Gateway in each region and peer the transit gateways together.

Set up a VPN connection between the two regions using the internet.

Use AWS PrivateLink to connect the two VPCs through endpoint services.

A company runs a high-traffic web application that uses a load balancer and multiple instances. They notice that their network costs are higher than expected. They have analyzed the traffic and found that most of the cost comes from data transfer between the load balancer and the instances. Which optimization should they implement?

Enable cross-zone load balancing to distribute traffic evenly across all instances.

Use a CDN to offload traffic from the load balancer.

Place all instances in the same availability zone as the load balancer to avoid inter-AZ data transfer charges.

Use a Network Load Balancer instead of an Application Load Balancer to reduce per-request overhead.

A DevOps team is responsible for provisioning network infrastructure for multiple development teams. They must ensure that all network resources are created with the same security baseline, but also allow teams to customize certain parameters like CIDR ranges. They want to avoid manual approval processes and reduce the time to deploy new environments. Which approach should they use?

Provide a self-service portal that generates IaC templates based on approved parameters and deploys them via a CI/CD pipeline.

Use a configuration management tool to apply security settings after resources are created manually.

Give each team direct access to the cloud provider's console to create resources manually.

Create a single IaC template with hardcoded values and require teams to submit change requests for any modifications.

What is the primary purpose of setting budget alerts for network resources?

To encrypt network traffic to avoid data transfer charges

To replace the need for cost analysis

To notify administrators when spending exceeds a defined threshold

To automatically reduce network performance to save costs

GIAC Cloud Security Architecture and Design

Domain 2Objective 4

Managing Cloud Networks at Scale GCAD Practice Questions (Page 9)

Part of the Network Architecture and Security domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 3–5 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

10concepts

Questions 41–45

41application · medium
A company runs a data-intensive application that transfers large amounts of data between two AWS regions every night. They are looking for ways to reduce data transfer costs. Which option would be most effective?
Select an answer first
42application · medium
A company runs a mission-critical application in two AWS regions (us-east-1 and us-west-2) for disaster recovery. They use VPC peering to connect the two VPCs, but they are concerned about the single point of failure if the peering connection fails. They want a more resilient and scalable connectivity option that also allows them to centralize network management. Which solution should they implement?
Select an answer first
43expert · hard
A company runs a high-traffic web application that uses a load balancer and multiple instances. They notice that their network costs are higher than expected. They have analyzed the traffic and found that most of the cost comes from data transfer between the load balancer and the instances. Which optimization should they implement?
Select an answer first
44expert · hard
A DevOps team is responsible for provisioning network infrastructure for multiple development teams. They must ensure that all network resources are created with the same security baseline, but also allow teams to customize certain parameters like CIDR ranges. They want to avoid manual approval processes and reduce the time to deploy new environments. Which approach should they use?
Select an answer first
45foundation · easy
What is the primary purpose of setting budget alerts for network resources?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCAD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCAD” is a trademark of its owner, used for identification only.

Managing Cloud Networks at Scale GCAD Practice Questions (Page 9)

Questions 41–45

A company runs a data-intensive application that transfers large amounts of data between two AWS regions every night. They are looking for ways to reduce data transfer costs. Which option would be most effective?

What is the primary purpose of setting budget alerts for network resources?

Keep studying — Network Architecture and Security