A healthcare organization stores patient records in an object storage bucket. The compliance team requires that data be encrypted at rest and that access be restricted to specific users and applications. Which set of controls should be implemented?

Move the bucket to a different region and enable versioning.

Use a storage gateway to mount the bucket as a file share.

Enable server-side encryption on the bucket and use IAM policies to grant least-privilege access.

Use a pre-signed URL for all access and disable public access.

A company runs a containerized application in a Kubernetes cluster. The security team requires that all container images be scanned for vulnerabilities before deployment and that runtime containers be restricted from accessing the host's kernel. Which combination of controls should be implemented?

Use a private container registry and enforce image pull secrets.

Use an image scanner in the CI/CD pipeline and run containers with a read-only root filesystem and no privileged mode.

Enable SELinux on the host and use a network policy to restrict egress traffic.

Run containers in a separate VM per pod and use a host-based firewall.

An organization stores backup data in object storage. The backups are encrypted with a customer-managed key (CMK). The security team wants to ensure that the key is rotated annually and that access to the backups is auditable. Which combination of controls should they implement?

Use a service-managed key and disable logging to reduce costs.

Enable versioning on the bucket and delete the CMK.

Enable key rotation on the CMK and enable access logging on the bucket.

Store the CMK in the same bucket as the backups.

A company is migrating its on-premises file server to the cloud. The file server hosts shared documents that are accessed by employees across multiple offices. The company needs low-latency access and the ability to set file-level permissions. Which cloud storage type should they use?

A content delivery network (CDN) to cache files.

File storage (e.g., Azure Files) with SMB or NFS protocol support.

Block storage attached to a single VM.

Object storage with a web-based interface.

A company has a storage bucket with a mix of data: some files are accessed daily, some monthly, and some never. The company wants to automate cost optimization by moving data to the most appropriate storage tier based on access patterns. Which approach should be used?

Use a single standard tier for all data to simplify management.

Manually review and move files to different buckets each month.

Use a lifecycle policy with rules that transition objects to colder tiers based on last access date.

Use a storage class that automatically adjusts based on access frequency.

GIAC Cloud Security Essentials

Domain 4Objective 2

Containers and Cloud Storage GCLD Practice Questions (Page 7)

Part of the Compute, Storage, and Containers domain, which makes up ~11% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–9 in this domain), expect 3–5 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

6concepts

Questions 31–35

31application · medium
A healthcare organization stores patient records in an object storage bucket. The compliance team requires that data be encrypted at rest and that access be restricted to specific users and applications. Which set of controls should be implemented?
Select an answer first
32application · medium
A company runs a containerized application in a Kubernetes cluster. The security team requires that all container images be scanned for vulnerabilities before deployment and that runtime containers be restricted from accessing the host's kernel. Which combination of controls should be implemented?
Select an answer first
33expert · hard
An organization stores backup data in object storage. The backups are encrypted with a customer-managed key (CMK). The security team wants to ensure that the key is rotated annually and that access to the backups is auditable. Which combination of controls should they implement?
Select an answer first
34application · medium
A company is migrating its on-premises file server to the cloud. The file server hosts shared documents that are accessed by employees across multiple offices. The company needs low-latency access and the ability to set file-level permissions. Which cloud storage type should they use?
Select an answer first
35expert · hard
A company has a storage bucket with a mix of data: some files are accessed daily, some monthly, and some never. The company wants to automate cost optimization by moving data to the most appropriate storage tier based on access patterns. Which approach should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCLD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCLD” is a trademark of its owner, used for identification only.