Why is version control considered a best practice for cloud automation?

It automatically deploys code to production without any review

It guarantees that automation code is secure

It allows you to track changes and roll back to previous versions of automation code

It eliminates the need for testing automation code

What does Infrastructure as Code (IaC) enable you to do?

Manually configure each server through the cloud console

Automatically fix all security misconfigurations in real time

Provision and manage cloud infrastructure using machine-readable definition files

Deploy applications without any underlying infrastructure

A team is using AWS CloudFormation to manage infrastructure. They want to implement a review process so that any change to the infrastructure template is reviewed by a senior engineer before being applied. Which approach aligns with Infrastructure as Code best practices?

Use a Git-based workflow with pull requests to review template changes, and use a CI pipeline to deploy the stack after approval.

Use AWS CloudFormation change sets to review changes before applying them.

Allow all developers to update the stack directly using the AWS CLI.

Use AWS Service Catalog to control template usage.

Which of the following is a typical benefit of automating cloud workflows?

Increased consistency and repeatability of operations

Removal of the need for any human oversight

Automatic compliance with all regulatory frameworks

Guaranteed elimination of all security vulnerabilities

A team is adopting Infrastructure as Code for their cloud deployments. They want to ensure that changes to infrastructure templates are reviewed and that the templates are tested before being applied to production. Which set of practices best supports this goal?

Store templates in a version control system, use pull requests for review, and run a test suite in a staging environment.

Use a spreadsheet to track changes and manually copy templates to the cloud provider.

Store templates on a shared network drive and have a senior engineer review them before deployment.

Deploy templates directly to production and monitor for issues after deployment.

GIAC Cloud Security Essentials

Domain 5Objective 3

Cloud Automation GCLD Practice Questions (Page 1)

Part of the Data Protection and Automation domain, which makes up ~23% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–18 in this domain), expect 4–6 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

7concepts

Questions 1–5

1foundation · easy
Why is version control considered a best practice for cloud automation?
Select an answer first
2foundation · easy
What does Infrastructure as Code (IaC) enable you to do?
Select an answer first
3application · medium
A team is using AWS CloudFormation to manage infrastructure. They want to implement a review process so that any change to the infrastructure template is reviewed by a senior engineer before being applied. Which approach aligns with Infrastructure as Code best practices?
Select an answer first
4foundation · easy
Which of the following is a typical benefit of automating cloud workflows?
Select an answer first
5application · medium
A team is adopting Infrastructure as Code for their cloud deployments. They want to ensure that changes to infrastructure templates are reviewed and that the templates are tested before being applied to production. Which set of practices best supports this goal?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCLD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCLD” is a trademark of its owner, used for identification only.