A security engineer is troubleshooting why a VM cannot access an object storage bucket. The VM has an IAM role attached that grants read access to the bucket. The bucket policy also allows access from the VPC where the VM resides. The engineer confirms the VM's security group allows outbound HTTPS. What is the most likely cause of the failure?

The VM's security group is blocking inbound traffic from the bucket service.

The IAM role's trust policy does not allow the VM's instance profile to assume the role.

The bucket is in a different region than the VM.

The VM's metadata service is disabled.

GIAC Cloud Security Essentials

Domain 4Objective 1

Secure Compute Deployment GCLD Practice Questions (Page 7)

Part of the Compute, Storage, and Containers domain, which makes up ~11% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–9 in this domain), expect 3–5 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

7concepts

Questions 31–31

31expert · hard
A security engineer is troubleshooting why a VM cannot access an object storage bucket. The VM has an IAM role attached that grants read access to the bucket. The bucket policy also allows access from the VPC where the VM resides. The engineer confirms the VM's security group allows outbound HTTPS. What is the most likely cause of the failure?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GCLD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCLD” is a trademark of its owner, used for identification only.

Secure Compute Deployment GCLD Practice Questions (Page 7)

Questions 31–31

Keep studying — Compute, Storage, and Containers