A company stores customer data in an object storage bucket. The data is subject to a data residency requirement that mandates it must remain within a specific country. The company also wants to protect against accidental deletion and ensure that data is encrypted at rest. Which combination of features should be enabled?

Use a storage gateway to cache data on-premises.

Enable object lock and use a customer-managed key.

Use a multi-region bucket and enable cross-region replication.

Create the bucket in a region within the required country, enable versioning, and enable server-side encryption.

A security team is reviewing a Kubernetes cluster that runs containerized workloads. They want to detect and respond to runtime threats, such as unauthorized process execution or file system changes. Which tool should they deploy?

A static image scanner that runs only during the build phase.

A network policy that restricts pod-to-pod communication.

A container runtime security tool that monitors system calls and container activity.

A log aggregator that collects container logs but does not analyze them.

A company runs a web application that allows users to upload and download files. The files are stored in a cloud object storage bucket. The application needs to generate temporary URLs for users to download files without exposing the bucket's credentials. Which approach should be used?

Use a storage gateway to mount the bucket as a network drive.

Make the bucket public and use the object's URL directly.

Use pre-signed URLs generated by the application with a short expiration time.

Use a CDN to cache the bucket content and provide a static URL.

Which capability is typically provided by a container orchestration platform?

Compilation of application source code into machine code.

Management of physical server hardware firmware updates.

Automatic scaling of container replicas based on resource utilization.

Creation of virtual machine images from container snapshots.

GIAC Cloud Security Essentials

Domain 4Objective 2

Containers and Cloud Storage GCLD Practice Questions (Page 6)

Part of the Compute, Storage, and Containers domain, which makes up ~11% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–9 in this domain), expect 3–5 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

6concepts

Questions 26–30

26expert · hard
A company stores customer data in an object storage bucket. The data is subject to a data residency requirement that mandates it must remain within a specific country. The company also wants to protect against accidental deletion and ensure that data is encrypted at rest. Which combination of features should be enabled?
Select an answer first
27application · medium
A security team is reviewing a Kubernetes cluster that runs containerized workloads. They want to detect and respond to runtime threats, such as unauthorized process execution or file system changes. Which tool should they deploy?
Select an answer first
28application · medium
A company runs a web application that allows users to upload and download files. The files are stored in a cloud object storage bucket. The application needs to generate temporary URLs for users to download files without exposing the bucket's credentials. Which approach should be used?
Select an answer first
29foundation · easy
Which cloud storage type is most appropriate for a virtual machine's operating system disk?
Select an answer first
30foundation · easy
Which capability is typically provided by a container orchestration platform?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCLD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCLD” is a trademark of its owner, used for identification only.

Containers and Cloud Storage GCLD Practice Questions (Page 6)

Questions 26–30

A security team is reviewing a Kubernetes cluster that runs containerized workloads. They want to detect and respond to runtime threats, such as unauthorized process execution or file system changes. Which tool should they deploy?

A company runs a web application that allows users to upload and download files. The files are stored in a cloud object storage bucket. The application needs to generate temporary URLs for users to download files without exposing the bucket's credentials. Which approach should be used?

Which cloud storage type is most appropriate for a virtual machine's operating system disk?

Which capability is typically provided by a container orchestration platform?

Keep studying — Compute, Storage, and Containers