A company is deploying a web application on a cloud IaaS platform. They are responsible for securing the virtual machines, including the OS and application. Which security control is the company's responsibility in this IaaS model?

Physical security of the data center.

Network infrastructure security, such as routers and switches.

Host-based firewall configuration on the VMs.

Which cloud-specific attack technique involves an attacker using a victim's cloud account to access and transfer sensitive data to an external location?

Data exfiltration via cloud services

A company is choosing between IaaS and PaaS for a new application. The security team is concerned about the attack surface and the ability to respond to incidents. Which of the following is a true statement about the shared responsibility model that should influence the decision?

In IaaS, the customer is responsible for patching the operating system, while in PaaS, the provider patches the runtime and middleware.

In SaaS, the customer is responsible for patching the underlying servers.

In IaaS, the provider is responsible for securing the application code.

In PaaS, the customer is responsible for securing the physical hosts.

A company's security team discovers that a public S3 bucket used for marketing assets contains a file with internal network diagrams. The bucket was created by a developer who left the company. The team needs to prevent this from happening again while minimizing administrative overhead. Which control should the team implement FIRST?

Create a new IAM role for the marketing team with read-only access to the bucket.

Enable S3 server-side encryption on the bucket and all future uploads.

Delete the exposed file and rotate all IAM credentials used by the marketing department.

Enable S3 Block Public Access at the account level and review existing bucket policies.

A developer accidentally exposed an API key in a public code repository. The key has permissions to access a cloud storage bucket. What is the most immediate action to mitigate the risk?

Revoke the exposed API key and generate a new one

Enable logging on the bucket to monitor for unauthorized access

Change the bucket's permissions to private

Remove the key from the repository and commit the change

GIAC Cyber Incident Leader

Domain 1Objective 1

Cloud Attacks GCIL Practice Questions (Page 8)

Part of the Attack Types and Vectors domain, which makes up ~33% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~17–26 in this domain), expect 3–5 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

5concepts

Questions 36–40

36application · easy
A company is deploying a web application on a cloud IaaS platform. They are responsible for securing the virtual machines, including the OS and application. Which security control is the company's responsibility in this IaaS model?
Select an answer first
37foundation · easy
Which cloud-specific attack technique involves an attacker using a victim's cloud account to access and transfer sensitive data to an external location?
Select an answer first
38expert · hard
A company is choosing between IaaS and PaaS for a new application. The security team is concerned about the attack surface and the ability to respond to incidents. Which of the following is a true statement about the shared responsibility model that should influence the decision?
Select an answer first
39application · medium
A company's security team discovers that a public S3 bucket used for marketing assets contains a file with internal network diagrams. The bucket was created by a developer who left the company. The team needs to prevent this from happening again while minimizing administrative overhead. Which control should the team implement FIRST?
Select an answer first
40application · medium
A developer accidentally exposed an API key in a public code repository. The key has permissions to access a cloud storage bucket. What is the most immediate action to mitigate the risk?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCIL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIL” is a trademark of its owner, used for identification only.