What is the primary purpose of a governance framework in a cloud environment?

To automatically optimize all cloud costs

To replace the need for IAM policies

To define policies and procedures for managing cloud resources consistently

To provide a backup solution for all cloud data

A developer needs to access a cloud storage bucket from a script. They ask for the root account credentials. What should the administrator do?

Provide the developer with the account password and ask them to log in to the console.

Create an IAM role and ask the developer to assume the role using the AWS CLI.

Provide the root account credentials because the developer needs full access.

Create an IAM user with a policy that grants read-only access to the specific bucket and provide the access keys to the developer.

A company is setting up a new cloud environment for a research division that must keep its spending separate from the main production account and must comply with internal data-handling policies. The cloud provider supports organizational units, projects, and subscriptions. Which approach should the administrator take?

Create a new subscription/project under the existing organization and assign the research division's users to it.

Use the existing production subscription/project and tag all research resources with a 'division' label.

Create a new organizational unit and move the entire production account into it.

Create a completely separate cloud account with a new payment method and no link to the existing organization.

A company wants to set up a budget alert for their cloud account. They want to be notified when spending reaches 80% of the budget. What should they configure?

Create a cost allocation tag and monitor the billing dashboard manually.

Create a billing report and schedule it to be emailed daily.

Create a budget with a threshold of 80% and configure an alert to send an email notification.

Create an IAM policy that denies resource creation when spending exceeds 80% of the budget.

In the shared responsibility model, who is responsible for enabling multi-factor authentication on the cloud account's root user?

Both the customer and provider equally

GIAC Cloud Security Essentials

Domain 1Objective 1

Cloud Account Fundamentals GCLD Practice Questions (Page 7)

Part of the Cloud Fundamentals and Shared Responsibility domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 3–5 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

7concepts

Questions 31–35

31foundation · easy
What is the primary purpose of a governance framework in a cloud environment?
Select an answer first
32application · medium
A developer needs to access a cloud storage bucket from a script. They ask for the root account credentials. What should the administrator do?
Select an answer first
33application · medium
A company is setting up a new cloud environment for a research division that must keep its spending separate from the main production account and must comply with internal data-handling policies. The cloud provider supports organizational units, projects, and subscriptions. Which approach should the administrator take?
Select an answer first
34application · medium
A company wants to set up a budget alert for their cloud account. They want to be notified when spending reaches 80% of the budget. What should they configure?
Select an answer first
35foundation · easy
In the shared responsibility model, who is responsible for enabling multi-factor authentication on the cloud account's root user?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCLD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCLD” is a trademark of its owner, used for identification only.