A security team is reviewing the IAM configuration of a cloud account. They find that a user has an access key that has been used to access resources from an unusual IP address. What should they do?

Immediately rotate the access key and review the user's recent activity for any unauthorized actions.

Change the user's password and ask them to enable MFA.

Leave the access key as it is and monitor the user's activity for a few days.

Disable the user's account and create a new one with a new access key.

When creating a new cloud account, which of the following is typically required as part of the initial verification process?

A credit card and a signed enterprise contract

A pre-configured virtual private cloud (VPC) with subnets

A valid email address and a phone number for identity verification

A domain name registered with a specific DNS provider

A company is migrating to the cloud and is concerned about who is responsible for securing the root account. They ask the cloud provider for a guarantee that the root account will be protected. What is the correct response?

The customer and the cloud provider share responsibility for the root account equally.

The cloud provider is responsible for securing the root account because it is part of the underlying infrastructure.

The customer is responsible for securing the root account, including enabling MFA and using strong passwords.

The cloud provider will automatically secure the root account with MFA and strong passwords.

What is the primary purpose of tagging cloud resources for cost management?

To categorize and track costs by project, department, or environment

To automatically reduce the cost of tagged resources

To encrypt resources that have a specific tag

To restrict access to resources based on tags

GIAC Cloud Security Essentials

Domain 1Objective 1

Cloud Account Fundamentals GCLD Practice Questions (Page 5)

Part of the Cloud Fundamentals and Shared Responsibility domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 3–5 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

7concepts

Questions 21–25

21expert · hard
A security team is reviewing the IAM configuration of a cloud account. They find that a user has an access key that has been used to access resources from an unusual IP address. What should they do?
Select an answer first
22foundation · easy
Which IAM component defines a set of permissions that can be attached to a user, group, or role?
Select an answer first
23foundation · easy
When creating a new cloud account, which of the following is typically required as part of the initial verification process?
Select an answer first
24application · medium
A company is migrating to the cloud and is concerned about who is responsible for securing the root account. They ask the cloud provider for a guarantee that the root account will be protected. What is the correct response?
Select an answer first
25foundation · easy
What is the primary purpose of tagging cloud resources for cost management?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCLD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCLD” is a trademark of its owner, used for identification only.