Automated Cloud Remediation GCSA Practice Questions (Page 10)

Questions 46–49

1. 46foundation · easy

   Why is it important to test automated remediation actions before deploying them?

   • ATo determine the cost of the remediation action
   • BTo comply with licensing requirements for the remediation tool
   • CTo ensure the remediation does not introduce new security issues or break existing functionality
   • DTo prove that the remediation is faster than manual response
   Reveal Solution Discussion Select an answer first
2. 47application · easy

   A security manager wants to reduce the time between detecting a security misconfiguration and correcting it. The team currently uses manual processes to fix issues. What is the primary benefit of implementing automated remediation?

   • AIt reduces the mean time to remediation (MTTR) by applying corrective actions automatically.
   • BIt removes the need for security policies.
   • CIt eliminates the need for security monitoring tools.
   • DIt guarantees that no security misconfiguration will ever occur.
   Reveal Solution Discussion Select an answer first
4. 48expert · hard

   A security team has developed an automated remediation playbook that terminates EC2 instances when a high-severity intrusion is detected. The playbook has been tested in staging, but the team is concerned about accidentally terminating a production instance that is not actually compromised. What is the best way to validate the playbook's safety before full production deployment?

   • ADeploy the playbook to production and monitor its actions for the first week.
   • BReview the playbook code with the security team and approve it for production.
   • CRun the playbook in a production-like environment that replicates the production network and instance tags, and verify it only terminates instances with the specific compromise indicator.
   • DDeploy the playbook to production but limit it to a single test instance that is not critical.
   Reveal Solution Discussion Select an answer first
5. 49expert · hard

   An organization uses Ansible to manage its cloud infrastructure. A compliance baseline requires that all Linux VMs have a specific security patch installed. A compliance scan finds that several VMs are missing the patch. The team wants to use infrastructure-as-code to remediate the drift. What is the best approach?

   • AUpdate the Ansible playbook to include the patch installation, then run the playbook against the non-compliant VMs.
   • BIgnore the drift and apply the patch during the next scheduled maintenance window.
   • CRecreate the VMs from a golden image that includes the patch.
   • DUse a script to SSH into each VM and install the patch manually.
   Reveal Solution Discussion Select an answer first