A security architect is using the NIST Cybersecurity Framework to assess a new cloud deployment. During the 'Protect' function, they identify that the cloud provider encrypts data at rest in storage services, but the customer application does not enforce encryption in transit. According to the shared responsibility model, what should the architect document?

The provider is responsible for encryption in transit because they manage the network.

The customer is responsible for implementing encryption in transit for their application traffic.

Encryption in transit is not required if data at rest is encrypted.

The provider is responsible for all encryption because they own the infrastructure.

A large enterprise is migrating to a multi-cloud environment and must comply with a regulation that requires data residency in a specific country. They are using the CSA Cloud Controls Matrix to guide their security controls. They also need to maintain a consistent security posture across both clouds. Which approach best addresses these requirements?

Select cloud regions in the required country and implement identical security controls in both clouds using the CCM as a baseline

Implement different security controls in each cloud to meet each provider's specific requirements

Use a single cloud provider to avoid multi-cloud complexity

Rely on each cloud provider's compliance certifications to meet the data residency requirement

A company is using a SaaS application for HR management. They are evaluating their security posture using the CSA Cloud Controls Matrix. Which control area is MOST likely to be the customer's responsibility?

Network infrastructure security

User access management and identity policies

Physical security of the data center

A company is using an IaaS cloud service. They are using the NIST Cybersecurity Framework to assess their security posture. Which responsibility is MOST likely to be the customer's?

Securing the physical data center

Configuring the guest operating system

GIAC Cloud Security Essentials

Domain 1Objective 3

Frameworks for Built-In Security GCLD Practice Questions (Page 5)

Part of the Cloud Fundamentals and Shared Responsibility domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 3–5 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

3concepts

Questions 21–25

21expert · hard
An organization is required to comply with a regulation that mandates a formal risk management process. They are considering using a security framework. Which framework is most appropriate to demonstrate compliance with this requirement?
Select an answer first
22application · medium
A security architect is using the NIST Cybersecurity Framework to assess a new cloud deployment. During the 'Protect' function, they identify that the cloud provider encrypts data at rest in storage services, but the customer application does not enforce encryption in transit. According to the shared responsibility model, what should the architect document?
Select an answer first
23expert · hard
A large enterprise is migrating to a multi-cloud environment and must comply with a regulation that requires data residency in a specific country. They are using the CSA Cloud Controls Matrix to guide their security controls. They also need to maintain a consistent security posture across both clouds. Which approach best addresses these requirements?
Select an answer first
24application · medium
A company is using a SaaS application for HR management. They are evaluating their security posture using the CSA Cloud Controls Matrix. Which control area is MOST likely to be the customer's responsibility?
Select an answer first
25application · medium
A company is using an IaaS cloud service. They are using the NIST Cybersecurity Framework to assess their security posture. Which responsibility is MOST likely to be the customer's?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCLD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCLD” is a trademark of its owner, used for identification only.

Frameworks for Built-In Security GCLD Practice Questions (Page 5)

Questions 21–25

An organization is required to comply with a regulation that mandates a formal risk management process. They are considering using a security framework. Which framework is most appropriate to demonstrate compliance with this requirement?

A company is using a SaaS application for HR management. They are evaluating their security posture using the CSA Cloud Controls Matrix. Which control area is MOST likely to be the customer's responsibility?

A company is using an IaaS cloud service. They are using the NIST Cybersecurity Framework to assess their security posture. Which responsibility is MOST likely to be the customer's?

Keep studying — Cloud Fundamentals and Shared Responsibility