A security team is reviewing threat intelligence that shows an adversary group uses unpatched vulnerabilities in web applications to gain initial access, then moves laterally to cloud databases. Which control is most directly informed by this threat pattern?

Implementing a vulnerability management program that prioritizes web application patches.

Deploying a network firewall to block all inbound traffic.

Enabling database encryption at rest.

Configuring multi-factor authentication for database users.

A security team is using the MITRE ATT&CK framework to map threat intelligence to cloud controls. They identify a technique where adversaries use valid accounts to access cloud resources. Which control is most directly informed by this technique?

Implementing user and entity behavior analytics (UEBA) to detect anomalous account activity.

Deploying a network firewall to restrict inbound traffic.

Using a single sign-on (SSO) solution.

GIAC Cloud Security Essentials

Domain 1Objective 2

Understanding Shared Responsibility and Threat Informed Defense GCLD Practice Questions (Page 8)

Part of the Cloud Fundamentals and Shared Responsibility domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 3–5 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

2concepts

Questions 36–37

36application · medium
A security team is reviewing threat intelligence that shows an adversary group uses unpatched vulnerabilities in web applications to gain initial access, then moves laterally to cloud databases. Which control is most directly informed by this threat pattern?
Select an answer first
37expert · hard
A security team is using the MITRE ATT&CK framework to map threat intelligence to cloud controls. They identify a technique where adversaries use valid accounts to access cloud resources. Which control is most directly informed by this technique?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GCLD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCLD” is a trademark of its owner, used for identification only.

Understanding Shared Responsibility and Threat Informed Defense GCLD Practice Questions (Page 8)

Questions 36–37

A security team is reviewing threat intelligence that shows an adversary group uses unpatched vulnerabilities in web applications to gain initial access, then moves laterally to cloud databases. Which control is most directly informed by this threat pattern?

A security team is using the MITRE ATT&CK framework to map threat intelligence to cloud controls. They identify a technique where adversaries use valid accounts to access cloud resources. Which control is most directly informed by this technique?

Keep studying — Cloud Fundamentals and Shared Responsibility