What is the primary goal of continuous compliance monitoring in a cloud environment?

To ensure that cloud resources remain compliant with policies over time.

To replace the need for security information and event management (SIEM) tools.

To automatically remediate all compliance violations without human intervention.

To perform a one-time assessment of cloud resources during an audit.

Which of the following is a typical component of a continuous compliance monitoring solution?

A firewall rule that blocks all inbound traffic.

A static report generated once after deployment.

A manual checklist that security auditors fill out quarterly.

A scheduled job that runs compliance checks against cloud resources.

A compliance officer wants to move from manually reviewing cloud configurations to a fully automated process. They want to define security controls as code, store them in a Git repository, and have them automatically tested against their cloud environment. What is the foundational concept they are implementing?

Continuous Integration/Continuous Deployment (CI/CD)

What is the purpose of remediation automation in cloud compliance?

To automatically correct non-compliant cloud resources when violations are detected.

To generate compliance reports for auditors.

To prevent all security incidents from occurring.

To replace the need for security monitoring.

GIAC Cloud Security Automation

Domain 2Objective 2

Cloud Compliance as Code GCSA Practice Questions (Page 7)

Part of the Cloud Security Automation and Compliance domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

10concepts

Questions 31–35

31foundation · easy
What is the primary goal of continuous compliance monitoring in a cloud environment?
Select an answer first
32application · medium
A company uses Google Cloud and wants to automatically assess their projects against the CIS Google Cloud Computing Platform Benchmark and export the results to BigQuery for custom reporting. Which Google Cloud service should they use?
Select an answer first
33foundation · easy
Which of the following is a typical component of a continuous compliance monitoring solution?
Select an answer first
34application · medium
A compliance officer wants to move from manually reviewing cloud configurations to a fully automated process. They want to define security controls as code, store them in a Git repository, and have them automatically tested against their cloud environment. What is the foundational concept they are implementing?
Select an answer first
35foundation · easy
What is the purpose of remediation automation in cloud compliance?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCSA” is a trademark of its owner, used for identification only.

Cloud Compliance as Code GCSA Practice Questions (Page 7)

Questions 31–35

What is the primary goal of continuous compliance monitoring in a cloud environment?

A company uses Google Cloud and wants to automatically assess their projects against the CIS Google Cloud Computing Platform Benchmark and export the results to BigQuery for custom reporting. Which Google Cloud service should they use?

Which of the following is a typical component of a continuous compliance monitoring solution?

What is the purpose of remediation automation in cloud compliance?

Keep studying — Cloud Security Automation and Compliance