A security analyst is setting up monitoring for a fleet of VMs. The analyst wants to detect unauthorized SSH access attempts and also track changes to security group rules. Which combination of logs should be enabled?

VM OS-level auth logs and cloud provider audit logs for network security changes.

Only network flow logs for the VPC.

Only VM OS-level application logs.

Only cloud provider audit logs for VM creation and deletion.

A company has a policy that all production VMs must have a specific set of tags and must be backed up daily. The security team wants to enforce this policy automatically. What is the most effective approach?

Create a manual checklist for administrators to follow when creating VMs.

Use an infrastructure-as-code template that includes the required tags and backup configuration.

Rely on the cloud provider's default backup settings and tagging.

Use a monitoring tool that alerts when VMs are missing tags or backups.

A company is deploying a VM that will store sensitive data. The security team requires encryption at rest, but the operations team is concerned about the performance impact of encryption. The VM will be used for a high-I/O database. Which approach should be taken?

Enable encryption on the VM's volumes and use a hardware-accelerated encryption option if available.

Do not encrypt the volumes and rely on the cloud provider's physical security.

Use a separate encrypted volume for the database and leave the OS volume unencrypted.

Encrypt only the database files, not the entire volume.

A company is deploying a VM that will store sensitive customer data. The compliance team requires that the data be encrypted at rest. The company uses a cloud provider that offers default encryption for volumes. What additional step should be taken to ensure the encryption keys are managed securely?

Store the encryption key on the VM's boot disk for easy access.

Use a customer-managed key stored in the cloud provider's key management service and control access via IAM.

Rely on the provider's default encryption and do nothing else.

Use a password to protect the volume and share it with all administrators.

GIAC Cloud Security Essentials

Domain 4Objective 1

Secure Compute Deployment GCLD Practice Questions (Page 1)

Part of the Compute, Storage, and Containers domain, which makes up ~11% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–9 in this domain), expect 3–5 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

7concepts

Questions 1–5

1application · medium
A security analyst is setting up monitoring for a fleet of VMs. The analyst wants to detect unauthorized SSH access attempts and also track changes to security group rules. Which combination of logs should be enabled?
Select an answer first
2application · medium
A company has a policy that all production VMs must have a specific set of tags and must be backed up daily. The security team wants to enforce this policy automatically. What is the most effective approach?
Select an answer first
3expert · hard
A company is deploying a VM that will store sensitive data. The security team requires encryption at rest, but the operations team is concerned about the performance impact of encryption. The VM will be used for a high-I/O database. Which approach should be taken?
Select an answer first
4application · medium
A company is deploying a VM that will store sensitive customer data. The compliance team requires that the data be encrypted at rest. The company uses a cloud provider that offers default encryption for volumes. What additional step should be taken to ensure the encryption keys are managed securely?
Select an answer first
5foundation · easy
Which principle is best described as granting a compute instance only the permissions required to perform its intended function?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCLD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCLD” is a trademark of its owner, used for identification only.

Secure Compute Deployment GCLD Practice Questions (Page 1)

Questions 1–5

A security analyst is setting up monitoring for a fleet of VMs. The analyst wants to detect unauthorized SSH access attempts and also track changes to security group rules. Which combination of logs should be enabled?

A company has a policy that all production VMs must have a specific set of tags and must be backed up daily. The security team wants to enforce this policy automatically. What is the most effective approach?

A company is deploying a VM that will store sensitive data. The security team requires encryption at rest, but the operations team is concerned about the performance impact of encryption. The VM will be used for a high-I/O database. Which approach should be taken?

Which principle is best described as granting a compute instance only the permissions required to perform its intended function?

Keep studying — Compute, Storage, and Containers