GIAC Cloud Security Automation
Domain 4Objective 3
Microservice API Gateways GCSA Practice Questions (Page 9)
Part of the Container and Microservices Lifecycle domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)
52questions here
11free pages
8concepts
Questions 41–45
- 41
Which of the following is a common function performed by an API gateway?
Select an answer first - 42
Which API gateway deployment pattern involves deploying a lightweight proxy as a sidecar container alongside each microservice instance?
Select an answer first - 43
A compliance team requires an audit trail of all API calls, including the client identity, request path, and response status. They also need to ensure that sensitive data in request bodies is not stored in logs. What should the team configure on the API gateway?
Select an answer first - 44
A team manages an API gateway using infrastructure-as-code. They need to update the gateway's routing rules to add a new microservice endpoint. They want to follow a reviewable, auditable process. What should they do?
Select an answer first - 45
Which API gateway management practice allows multiple versions of an API to be exposed simultaneously, enabling clients to migrate gradually?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCSA” is a trademark of its owner, used for identification only.