A team runs microservices on Kubernetes with horizontal pod autoscaling. The API gateway needs to route requests to service instances that may be created or destroyed dynamically. Which integration should the gateway use to stay current with available instances?

Require clients to specify the pod IP in each request.

Use a static load balancer that is updated manually every time a pod is created.

Hard-code the IP addresses of all service instances in the gateway configuration.

Integrate with Kubernetes service discovery so the gateway resolves service names to current pod IPs.

An operations team needs to detect a potential brute-force attack on their API gateway. They have access to gateway logs that include client IP, timestamp, request path, and response status. Which monitoring approach would best help identify the attack?

Track the average response time of the gateway and alert if it increases by more than 50%.

Set up an alert that triggers when the number of 401 responses from a single IP exceeds a threshold within a short time window.

Enable verbose logging of all request headers and store logs for 90 days, but do not create any alerts.

Monitor the total number of requests per minute across all clients and alert if it exceeds a global threshold.

GIAC Cloud Security Automation

Domain 4Objective 3

Microservice API Gateways GCSA Practice Questions (Page 11)

Part of the Container and Microservices Lifecycle domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

8concepts

Questions 51–52

51application · medium
A team runs microservices on Kubernetes with horizontal pod autoscaling. The API gateway needs to route requests to service instances that may be created or destroyed dynamically. Which integration should the gateway use to stay current with available instances?
Select an answer first
52application · medium
An operations team needs to detect a potential brute-force attack on their API gateway. They have access to gateway logs that include client IP, timestamp, request path, and response status. Which monitoring approach would best help identify the attack?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCSA” is a trademark of its owner, used for identification only.

Microservice API Gateways GCSA Practice Questions (Page 11)

Questions 51–52

A team runs microservices on Kubernetes with horizontal pod autoscaling. The API gateway needs to route requests to service instances that may be created or destroyed dynamically. Which integration should the gateway use to stay current with available instances?

An operations team needs to detect a potential brute-force attack on their API gateway. They have access to gateway logs that include client IP, timestamp, request path, and response status. Which monitoring approach would best help identify the attack?

Keep studying — Container and Microservices Lifecycle