
GIAC Cloud Security Automation
Domain 4Objective 2
Microservices Architecture and Deployment GCSA Practice Questions (Page 6)
Part of the Container and Microservices Lifecycle domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)
37questions here
8free pages
10concepts
Questions 26–30
- 26
A company is refactoring a monolithic application into microservices. The team wants to ensure that each service can be developed, deployed, and scaled independently. They also want to avoid sharing a single database schema across services. Which architectural principle should they follow?
Select an answer first - 27
A development team is containerizing a microservice that reads configuration from environment variables. They want to ensure that the same container image can be promoted from development to production without rebuilding, and that secrets are not baked into the image. Which approach should they use?
Select an answer first - 28
An online payment service is deploying a new version of its transaction-processing microservice. The team wants to minimize the risk of a faulty release affecting all users while still being able to quickly roll back if problems occur. They have the ability to route traffic based on HTTP headers and can run multiple versions of the service simultaneously. Which deployment strategy best fits these requirements?
Select an answer first - 29
A team is setting up a CI/CD pipeline for a microservice that is deployed to a Kubernetes cluster. They want to automatically deploy to production only if the service passes integration tests and a security scan. They also want to be able to roll back quickly if the deployment causes issues. Which pipeline design should they use?
Select an answer first - 30
A company has a microservices architecture with many services. They are experiencing intermittent failures in one service, and they need to identify which service is causing a slowdown in a user request that spans multiple services. Which observability practice should they implement?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCSA” is a trademark of its owner, used for identification only.