What is the role of policy tests in Infrastructure as Code?

To test the performance of the infrastructure under load.

To ensure that the infrastructure complies with organizational security and compliance policies.

To verify that the IaC code is syntactically correct.

To validate that the infrastructure can be rolled back.

A security team wants to ensure that all Terraform code in their repository does not create storage buckets with public read access. They want to enforce this automatically before any merge to the main branch. What is the best approach?

Add a pre-commit hook that runs `terraform fmt`

Require a senior engineer to review every pull request

Run `terraform apply` in a test environment and check the bucket

Use a static analysis tool like Checkov or tfsec in the CI pipeline

What is the primary purpose of a rollback mechanism in infrastructure deployment?

To automatically fix any issues that occur during deployment.

To speed up the deployment process.

To ensure that the new version is deployed to all users immediately.

To revert the infrastructure to a known good state if the deployment fails or causes problems.

A company is deploying a new microservice to a Kubernetes cluster using a GitOps approach with ArgoCD. They want to ensure that the deployment is automatically rolled back if the new version fails health checks. They also want to avoid manual intervention. What should they configure?

Use a blue-green deployment with manual switch

Configure a rolling update with no automated rollback

Use `kubectl rollout undo` manually

Set up a canary deployment with automated analysis and rollback in ArgoCD

GIAC Cloud Security Automation

Domain 1Objective 3

Deploying Cloud Infrastructure as Code GCSA Practice Questions (Page 9)

Part of the DevOps and Cloud Infrastructure domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 3–5 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

10concepts

Questions 41–44

41foundation · easy
What is the role of policy tests in Infrastructure as Code?
Select an answer first
42application · medium
A security team wants to ensure that all Terraform code in their repository does not create storage buckets with public read access. They want to enforce this automatically before any merge to the main branch. What is the best approach?
Select an answer first
43foundation · easy
What is the primary purpose of a rollback mechanism in infrastructure deployment?
Select an answer first
44expert · hard
A company is deploying a new microservice to a Kubernetes cluster using a GitOps approach with ArgoCD. They want to ensure that the deployment is automatically rolled back if the new version fails health checks. They also want to avoid manual intervention. What should they configure?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCSA” is a trademark of its owner, used for identification only.