Which of the following is an example of encrypting data at rest in a cloud storage service?

Enabling server-side encryption on the storage bucket

Using TLS to connect to the storage service

Using a VPN to access the storage service

Setting a bucket policy to allow only certain users

What is the principle of least privilege in the context of IAM policies?

Granting users the maximum permissions possible to avoid access issues

Granting users the minimum permissions necessary to perform their job functions

Granting all users the same level of access for simplicity

Granting permissions only to administrators

A security policy requires that all cloud access keys be rotated every 90 days. An administrator discovers that a critical application uses an access key that was created 120 days ago and the key is embedded in the application's configuration file. What is the best course of action?

Disable the old key and rely on the application's retry logic to use a new key automatically.

Create a new key, update the application, and delete the old key after a week.

Rotate the key immediately and update the application to retrieve credentials from a secret management service.

Extend the rotation policy to 180 days to match the application's deployment cycle.

Which configuration is essential for securing a cloud storage bucket that contains sensitive data?

Using a simple bucket name to make it easy to remember

Disabling logging to reduce storage costs

Enabling encryption and restricting access to authorized users only

Making the bucket publicly readable for easy access

A security analyst is reviewing cloud logs and notices that a service account key was used to access a storage bucket from an IP address that is not associated with the organization. The key is scheduled for rotation in 30 days. What is the most appropriate immediate response?

Add an IP restriction to the key to block the suspicious IP address.

Disable the key immediately and investigate the access logs to determine the scope of the incident.

Change the service account's password and notify the application owner.

Wait for the scheduled rotation in 30 days to avoid disrupting operations.

GIAC Certified Incident Handler

Domain 4Objective 3

Securing Credentials and Data in the Cloud GCIH Practice Questions (Page 8)

Part of the Credential and Access Security domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~17–29 in this domain), expect 6–10 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

10concepts

Questions 36–40

36foundation · easy
Which of the following is an example of encrypting data at rest in a cloud storage service?
Select an answer first
37foundation · easy
What is the principle of least privilege in the context of IAM policies?
Select an answer first
38application · medium
A security policy requires that all cloud access keys be rotated every 90 days. An administrator discovers that a critical application uses an access key that was created 120 days ago and the key is embedded in the application's configuration file. What is the best course of action?
Select an answer first
39foundation · easy
Which configuration is essential for securing a cloud storage bucket that contains sensitive data?
Select an answer first
40expert · hard
A security analyst is reviewing cloud logs and notices that a service account key was used to access a storage bucket from an IP address that is not associated with the organization. The key is scheduled for rotation in 30 days. What is the most appropriate immediate response?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCIH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIH” is a trademark of its owner, used for identification only.