A company must comply with a regulatory framework that requires segregation of duties. The company wants to ensure that no single user can both create a virtual machine and approve its firewall rules. What should the administrator do?

Create a single IAM role that includes both permissions and assign it to all administrators.

Use the Owner role for all administrators and rely on audit logs to detect violations.

Create two IAM roles: one with permission to create virtual machines and another with permission to modify firewall rules, and assign them to different users.

Create a custom role with both permissions and assign it to a single user.

A company has multiple projects with different teams. They want to apply different IAM policies to each project and ensure that billing is tracked separately. What should they do?

Create a separate cloud account for each project and apply IAM policies within each account.

Create a single cloud account and use IAM roles to separate access for each project.

Create a single cloud account and use tags to track billing for each project.

Create a single cloud account and use organizational units to separate projects.

A multinational corporation must comply with data residency regulations that require personal data of EU citizens to be stored in the EU. The company is designing its cloud account structure. What should the administrator do to meet this requirement?

Create a separate subscription/project in an EU region and ensure that all EU personal data is stored there.

Create a separate cloud account for the EU subsidiary with no link to the parent organization.

Use a single global subscription and rely on the cloud provider's data encryption to satisfy the regulation.

Store all data in the company's on-premises data center and use the cloud only for non-personal data.

Which of the following is an example of a customer responsibility under the shared responsibility model?

Maintaining the cloud provider's network infrastructure

Securing the physical data center

Configuring IAM roles and policies for user access

Patching the hypervisor that runs virtual machines

What is a key security best practice for managing access keys for cloud accounts?

Use the same access key for all cloud services

Share access keys among team members to avoid multiple keys

Embed access keys directly in application source code for simplicity

Rotate access keys regularly and remove unused keys

GIAC Cloud Security Essentials

Domain 1Objective 1

Cloud Account Fundamentals GCLD Practice Questions (Page 3)

Part of the Cloud Fundamentals and Shared Responsibility domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 3–5 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

7concepts

Questions 11–15

11application · medium
A company must comply with a regulatory framework that requires segregation of duties. The company wants to ensure that no single user can both create a virtual machine and approve its firewall rules. What should the administrator do?
Select an answer first
12application · medium
A company has multiple projects with different teams. They want to apply different IAM policies to each project and ensure that billing is tracked separately. What should they do?
Select an answer first
13application · medium
A multinational corporation must comply with data residency regulations that require personal data of EU citizens to be stored in the EU. The company is designing its cloud account structure. What should the administrator do to meet this requirement?
Select an answer first
14foundation · easy
Which of the following is an example of a customer responsibility under the shared responsibility model?
Select an answer first
15foundation · easy
What is a key security best practice for managing access keys for cloud accounts?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCLD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCLD” is a trademark of its owner, used for identification only.