A company stores customer data in an object storage bucket. They want to ensure that data is not accidentally deleted and that previous versions can be recovered if needed. Which configuration should they enable?

Enable versioning on the bucket.

Enable cross-region replication.

Set a lifecycle policy to delete objects after 30 days.

A company needs to store and serve a large number of small images (e.g., product photos) on a website. The images are read-only and accessed via HTTP. The company wants to minimize storage cost and ensure high availability. Which storage solution is best?

A block storage volume attached to a web server.

A file storage share mounted on multiple web servers.

An object storage bucket with a CDN in front.

A cold storage tier with a retrieval request for each image.

A company stores log files in object storage. The logs are accessed frequently for the first 30 days, then rarely after that. Regulatory requirements mandate that logs be retained for 7 years. The company wants to minimize storage costs. Which lifecycle policy should they configure?

Transition logs to archive tier immediately and delete after 30 days.

Transition logs to a cold storage tier after 30 days and delete them after 7 years.

Keep logs in the hot tier for 7 years.

A company uses object storage for a data lake. The data is accessed by analytics jobs that run every hour. The company wants to reduce storage costs while maintaining acceptable performance for the analytics jobs. Which storage tier should they use?

Cold storage tier with no retrieval fees.

A startup is deploying a microservices application on a Kubernetes cluster. Each microservice is packaged as a container image. The security team requires that all images be scanned for vulnerabilities before deployment and that the runtime environment restrict container privileges. Which combination of controls should the team implement?

Use a container runtime that automatically sandboxes all containers and disable the Kubernetes API server.

Integrate an image scanner into the CI/CD pipeline and configure a pod security policy that drops all capabilities and runs containers as non-root.

Run all containers in privileged mode and use a network policy to restrict traffic.

Scan images only after deployment and rely on the container runtime's default isolation.

GIAC Cloud Security Essentials

Domain 4Objective 2

Containers and Cloud Storage GCLD Practice Questions (Page 4)

Part of the Compute, Storage, and Containers domain, which makes up ~11% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–9 in this domain), expect 3–5 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

6concepts

Questions 16–20

16application · medium
A company stores customer data in an object storage bucket. They want to ensure that data is not accidentally deleted and that previous versions can be recovered if needed. Which configuration should they enable?
Select an answer first
17application · medium
A company needs to store and serve a large number of small images (e.g., product photos) on a website. The images are read-only and accessed via HTTP. The company wants to minimize storage cost and ensure high availability. Which storage solution is best?
Select an answer first
18expert · hard
A company stores log files in object storage. The logs are accessed frequently for the first 30 days, then rarely after that. Regulatory requirements mandate that logs be retained for 7 years. The company wants to minimize storage costs. Which lifecycle policy should they configure?
Select an answer first
19application · medium
A company uses object storage for a data lake. The data is accessed by analytics jobs that run every hour. The company wants to reduce storage costs while maintaining acceptable performance for the analytics jobs. Which storage tier should they use?
Select an answer first
20application · medium
A startup is deploying a microservices application on a Kubernetes cluster. Each microservice is packaged as a container image. The security team requires that all images be scanned for vulnerabilities before deployment and that the runtime environment restrict container privileges. Which combination of controls should the team implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCLD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCLD” is a trademark of its owner, used for identification only.