A company uses Puppet to manage configuration on a large number of cloud servers. The team wants to ensure that configuration changes are tested before being applied to production servers. They also want to maintain a history of changes for auditing. Which approach best meets these requirements?

Use a separate Puppet master for each server to isolate changes.

Use Puppet's development environment to test changes, then promote them to production after review, and store Puppet code in version control.

Manually copy Puppet manifests to production servers and track changes in a spreadsheet.

Apply changes directly to production servers and rely on Puppet's logging for auditing.

A development team uses a CI/CD pipeline to deploy containerized applications to a Kubernetes cluster. The security team requires that all container images be scanned for vulnerabilities before they are deployed to production. Where should the image scan be integrated to enforce this requirement?

As a manual step performed by the security team on a weekly basis.

As a post-deployment job that runs after the image is already running in production.

As a stage in the pipeline after the image is built but before it is promoted to the production environment.

As a scheduled job in the cluster that scans running containers every night.

What is the primary role of configuration management tools in cloud environments?

To replace the need for any security monitoring

To manually apply patches to each server individually

To automate the setup and maintenance of software and system configurations

To provision cloud networks and virtual machines only

A company wants to deploy a new version of a web application to production only after all automated tests pass and a security scan finds no critical vulnerabilities. What is the best way to implement this requirement?

Deploy the new version to production and monitor for errors using application logs.

Configure the CI/CD pipeline to run tests and security scans, and only deploy if all checks pass.

Have developers run tests locally and then deploy directly to production.

Run tests and security scans manually after the deployment and roll back if issues are found.

GIAC Cloud Security Essentials

Domain 5Objective 3

Cloud Automation GCLD Practice Questions (Page 8)

Part of the Data Protection and Automation domain, which makes up ~23% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–18 in this domain), expect 4–6 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

7concepts

Questions 36–40

36expert · hard
A company uses Puppet to manage configuration on a large number of cloud servers. The team wants to ensure that configuration changes are tested before being applied to production servers. They also want to maintain a history of changes for auditing. Which approach best meets these requirements?
Select an answer first
37application · medium
A development team uses a CI/CD pipeline to deploy containerized applications to a Kubernetes cluster. The security team requires that all container images be scanned for vulnerabilities before they are deployed to production. Where should the image scan be integrated to enforce this requirement?
Select an answer first
38foundation · easy
What is the primary role of configuration management tools in cloud environments?
Select an answer first
39foundation · easy
Which of the following is an example of a cloud automation service?
Select an answer first
40application · medium
A company wants to deploy a new version of a web application to production only after all automated tests pass and a security scan finds no critical vulnerabilities. What is the best way to implement this requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCLD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCLD” is a trademark of its owner, used for identification only.