A financial services company must comply with PCI DSS. They are setting up a new cloud account for payment processing. What should they do to ensure the account setup supports PCI DSS compliance?

Use a single account for all workloads and rely on the cloud provider's PCI DSS certification.

Use a single account and apply the same policies to all resources, regardless of compliance requirements.

Use a third-party compliance tool to monitor the account, but do not change the account structure.

Create a separate account for payment processing and apply PCI DSS-specific policies and controls.

What is the primary purpose of an IAM role in cloud environments?

To define a network access control list for resources

To group multiple users into a single identity

To provide temporary permissions to an entity that assumes the role

To create a permanent login for a human user

An administrator needs to grant a team of developers the ability to create and manage virtual machines in a specific project, but they must not be able to delete the project itself or modify IAM policies. The developers are already in a group. What should the administrator do?

Grant the developers' group the Viewer role and then give each developer a service account key.

Create a new user for each developer and assign them the Editor role.

Assign the developers' group a custom role that includes only the permissions to create and manage virtual machines.

Add the developers' group to the project as Owner.

A healthcare company is moving to the cloud and must comply with HIPAA. They need to ensure that their cloud account setup supports compliance. What should they do?

Create separate accounts for different compliance scopes and apply appropriate policies to each account.

Use a single account and apply the same compliance policies to all resources.

Use a third-party compliance tool to monitor the account, but do not change the account structure.

Use a single account for all workloads and rely on the cloud provider's compliance certifications.

GIAC Cloud Security Essentials

Domain 1Objective 1

Cloud Account Fundamentals GCLD Practice Questions (Page 1)

Part of the Cloud Fundamentals and Shared Responsibility domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 3–5 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

7concepts

Questions 1–5

1application · medium
A financial services company must comply with PCI DSS. They are setting up a new cloud account for payment processing. What should they do to ensure the account setup supports PCI DSS compliance?
Select an answer first
2foundation · easy
What is the primary purpose of an IAM role in cloud environments?
Select an answer first
3application · medium
An administrator needs to grant a team of developers the ability to create and manage virtual machines in a specific project, but they must not be able to delete the project itself or modify IAM policies. The developers are already in a group. What should the administrator do?
Select an answer first
4foundation · easy
Which cloud feature allows you to set a threshold and receive notifications when your spending exceeds that threshold?
Select an answer first
5application · medium
A healthcare company is moving to the cloud and must comply with HIPAA. They need to ensure that their cloud account setup supports compliance. What should they do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCLD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCLD” is a trademark of its owner, used for identification only.