In cloud account hierarchy, what is the purpose of an organizational unit (OU) in AWS Organizations?

To provide a separate billing boundary for each account

To create a virtual private cloud that spans multiple accounts

To replace the need for IAM roles within member accounts

To group multiple AWS accounts into a logical container for policy management

A company is using a cloud provider's managed database service. They want to know who is responsible for patching the database software. What is the correct answer?

The customer and the provider share responsibility for patching the database software.

The customer is responsible for patching the database software because they control the data.

The customer is responsible for patching the database software if they use a specific configuration.

The cloud provider is responsible for patching the database software because it is a managed service.

A company is using a cloud provider that supports IAM roles and policies. The company wants to enforce a policy that requires all IAM users to use MFA. The company also wants to ensure that any user who does not use MFA cannot access the cloud console. What is the most effective way to enforce this?

Disable all IAM users and require them to use the root account with MFA.

Create a strong password policy and require users to change passwords every 30 days.

Create an IAM policy that denies access to the cloud console if the user does not have MFA enabled.

Send an email to all users asking them to enable MFA.

A company wants to ensure that they are notified when their cloud spending exceeds a certain threshold. They also want to track costs by department. Which billing and cost management features should they configure?

Use a third-party cost management tool that integrates with the cloud provider's API.

Enable detailed billing reports and manually review them at the end of each month.

Set up a budget with an alert threshold and use cost allocation tags to track costs by department.

Create separate accounts for each department and use the consolidated billing report to track costs.

A startup is creating its first cloud account. The founder wants to ensure that the account is secure from the start and that costs are controlled. Which two actions should the founder take during the account creation process?

Create a strong password and share it with all employees.

Enable multi-factor authentication (MFA) on the root account and set up a budget alert.

Skip MFA to simplify the sign-in process and rely on a complex password.

Set up a budget alert but do not enable MFA.

GIAC Cloud Security Essentials

Domain 1Objective 1

Cloud Account Fundamentals GCLD Practice Questions (Page 6)

Part of the Cloud Fundamentals and Shared Responsibility domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 3–5 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

7concepts

Questions 26–30

26foundation · easy
In cloud account hierarchy, what is the purpose of an organizational unit (OU) in AWS Organizations?
Select an answer first
27application · medium
A company is using a cloud provider's managed database service. They want to know who is responsible for patching the database software. What is the correct answer?
Select an answer first
28expert · hard
A company is using a cloud provider that supports IAM roles and policies. The company wants to enforce a policy that requires all IAM users to use MFA. The company also wants to ensure that any user who does not use MFA cannot access the cloud console. What is the most effective way to enforce this?
Select an answer first
29application · medium
A company wants to ensure that they are notified when their cloud spending exceeds a certain threshold. They also want to track costs by department. Which billing and cost management features should they configure?
Select an answer first
30application · medium
A startup is creating its first cloud account. The founder wants to ensure that the account is secure from the start and that costs are controlled. Which two actions should the founder take during the account creation process?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCLD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCLD” is a trademark of its owner, used for identification only.