Which principle is a core component of zero trust for edge identity?

Relying solely on perimeter firewalls for security

Once authenticated, always trusted

Continuous verification of identity and device health

Trust based on network location

A company deploys edge devices that need to authenticate to a cloud service using client certificates. The certificates are issued by an internal CA. The security team wants to automate certificate renewal without manual intervention. Which approach is most appropriate?

Manually generate certificates and install them on each device annually.

Use the ACME protocol with a trusted agent on each device to automatically obtain and renew certificates from the internal CA.

Use a long-lived certificate that never expires.

Reuse the same certificate across all devices to simplify renewal.

A company operates a fleet of drones that send telemetry to a ground control server. The drones authenticate using client certificates. The security team wants to ensure that a compromised drone cannot impersonate another drone. Which control is essential?

Require the drone to present a valid certificate signed by a trusted CA.

Use a long certificate validity period to reduce renewal overhead.

Ensure each drone has a unique private key and certificate.

Use a strong encryption algorithm for the TLS session.

Why is regular rotation of secrets important for edge devices?

To reduce the window of exposure if a secret is compromised

To make it easier for attackers to guess the secret

To eliminate the need for access controls on the secrets

To ensure the secret is always stored in plain text

What is the primary benefit of identity federation for edge services?

It eliminates the need for any authentication at edge locations

It only works within a single cloud provider's network

It allows users to use the same credentials to access resources across different trust domains

It requires each edge service to maintain its own separate user database

GIAC Cloud Security Automation

Domain 5Objective 1

Edge Identity and Authentication GCSA Practice Questions (Page 8)

Part of the Identity, Secrets, and Supply Chain domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

6concepts

Questions 36–40

36foundation · easy
Which principle is a core component of zero trust for edge identity?
Select an answer first
37application · medium
A company deploys edge devices that need to authenticate to a cloud service using client certificates. The certificates are issued by an internal CA. The security team wants to automate certificate renewal without manual intervention. Which approach is most appropriate?
Select an answer first
38application · medium
A company operates a fleet of drones that send telemetry to a ground control server. The drones authenticate using client certificates. The security team wants to ensure that a compromised drone cannot impersonate another drone. Which control is essential?
Select an answer first
39foundation · easy
Why is regular rotation of secrets important for edge devices?
Select an answer first
40foundation · easy
What is the primary benefit of identity federation for edge services?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCSA” is a trademark of its owner, used for identification only.