A security team is applying the NIST Cybersecurity Framework to a cloud environment. They have identified a gap in the 'Detect' function related to monitoring and logging. The cloud provider offers logging services, but the customer must configure log collection and alerting. The team must decide how to address this gap. What is the BEST approach?

Rely on the provider's default logging and alerting.

Configure the provider's logging service to collect relevant logs and set up alerts for suspicious activity.

Document the gap as a provider responsibility because the provider offers logging services.

Defer logging configuration until after an incident occurs.

A security team is using the CIS Critical Security Controls to assess a hybrid cloud environment. They have a gap in the 'Secure Configuration' control for their cloud resources. They need to implement a solution that can automatically detect and remediate configuration drift. Which approach is BEST?

Rely on the cloud provider's default configuration monitoring.

Conduct manual quarterly reviews of cloud configurations.

Implement a firewall rule to block configuration changes.

Use a cloud security posture management (CSPM) tool that continuously monitors and remediates configurations.

A security team is using the CIS Controls to assess a cloud deployment. Which action best demonstrates applying the CIS Controls to the architecture?

Configuring the cloud provider's physical security controls

Selecting a cloud region that offers the lowest latency

Reviewing the deployment against the CIS Control for 'Inventory and Control of Enterprise Assets' to ensure all cloud resources are tracked

Ensuring the cloud provider has obtained ISO 27001 certification for its data centers

A company is using a cloud provider's IaaS service and wants to align with the CIS Critical Security Controls. They need to implement a control for 'Data Protection'. Which responsibility falls to the customer?

Encrypting data stored in their virtual machines

Patching the host operating system

Securing the physical storage devices

GIAC Cloud Security Essentials

Domain 1Objective 3

Frameworks for Built-In Security GCLD Practice Questions (Page 3)

Part of the Cloud Fundamentals and Shared Responsibility domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 3–5 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

3concepts

Questions 11–15

11expert · hard
A security team is applying the NIST Cybersecurity Framework to a cloud environment. They have identified a gap in the 'Detect' function related to monitoring and logging. The cloud provider offers logging services, but the customer must configure log collection and alerting. The team must decide how to address this gap. What is the BEST approach?
Select an answer first
12expert · hard
A security team is using the CIS Critical Security Controls to assess a hybrid cloud environment. They have a gap in the 'Secure Configuration' control for their cloud resources. They need to implement a solution that can automatically detect and remediate configuration drift. Which approach is BEST?
Select an answer first
13foundation · easy
A security team is using the CIS Controls to assess a cloud deployment. Which action best demonstrates applying the CIS Controls to the architecture?
Select an answer first
14foundation · easy
Which framework provides a set of prioritized cybersecurity best practices that are widely used as a baseline for securing cloud workloads, including specific safeguards for account management, data protection, and secure configuration?
Select an answer first
15application · medium
A company is using a cloud provider's IaaS service and wants to align with the CIS Critical Security Controls. They need to implement a control for 'Data Protection'. Which responsibility falls to the customer?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCLD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCLD” is a trademark of its owner, used for identification only.

Frameworks for Built-In Security GCLD Practice Questions (Page 3)

Questions 11–15

A security team is using the CIS Controls to assess a cloud deployment. Which action best demonstrates applying the CIS Controls to the architecture?

Which framework provides a set of prioritized cybersecurity best practices that are widely used as a baseline for securing cloud workloads, including specific safeguards for account management, data protection, and secure configuration?

A company is using a cloud provider's IaaS service and wants to align with the CIS Critical Security Controls. They need to implement a control for 'Data Protection'. Which responsibility falls to the customer?

Keep studying — Cloud Fundamentals and Shared Responsibility