A company is building a CI/CD pipeline for a microservices application. They want to ensure that the pipeline can build and test each service independently, but also run integration tests that span multiple services. They also want to deploy only after all tests pass. Which pipeline design best meets these requirements?

A pipeline with stages for each service, followed by a shared integration test stage, and a deployment stage

A pipeline that only runs integration tests and then deploys

A single pipeline that builds and tests all services together

A pipeline that deploys each service immediately after its own tests pass

An e-commerce platform experiences sudden spikes in traffic during flash sales. The microservices are deployed on Kubernetes. The team wants to ensure that the services can handle the increased load without manual intervention and that a failure in one service does not cascade to others. Which combination of practices should they implement?

Vertical scaling and retries with no timeout

Increase pod resources and disable health checks

Manual scaling and infinite retries

Horizontal pod autoscaling and circuit breakers

A company is deploying microservices to multiple cloud regions. They need to manage configuration and secrets centrally, but also need to ensure that secrets are encrypted and access is audited. They want to avoid storing secrets in plaintext in configuration files. Which solution should they use?

Environment variables in CI/CD pipeline

Plaintext configuration files in a private network share

Encrypted configuration files stored in a shared repository

Centralized secrets manager with encryption and audit logging

GIAC Cloud Security Automation

Domain 4Objective 2

Microservices Architecture and Deployment GCSA Practice Questions (Page 7)

Part of the Container and Microservices Lifecycle domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

10concepts

Questions 31–35

31expert · hard
A company is building a CI/CD pipeline for a microservices application. They want to ensure that the pipeline can build and test each service independently, but also run integration tests that span multiple services. They also want to deploy only after all tests pass. Which pipeline design best meets these requirements?
Select an answer first
32application · medium
An e-commerce platform experiences sudden spikes in traffic during flash sales. The microservices are deployed on Kubernetes. The team wants to ensure that the services can handle the increased load without manual intervention and that a failure in one service does not cascade to others. Which combination of practices should they implement?
Select an answer first
33expert · hard
A company is deploying microservices to multiple cloud regions. They need to manage configuration and secrets centrally, but also need to ensure that secrets are encrypted and access is audited. They want to avoid storing secrets in plaintext in configuration files. Which solution should they use?
Select an answer first
34expert · hard
A critical payment service is being updated. The team must ensure zero downtime and the ability to roll back instantly if the new version fails. They have a load balancer that can switch traffic between two identical environments. Which deployment strategy should they use?
Select an answer first
35application · medium
A company exposes several microservices to external clients. They need to enforce authentication, rate limiting, and request routing to the appropriate service. They also want to hide the internal service topology from clients. Which component should they place at the edge?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCSA” is a trademark of its owner, used for identification only.

Microservices Architecture and Deployment GCSA Practice Questions (Page 7)

Questions 31–35

A company is deploying microservices to multiple cloud regions. They need to manage configuration and secrets centrally, but also need to ensure that secrets are encrypted and access is audited. They want to avoid storing secrets in plaintext in configuration files. Which solution should they use?

A critical payment service is being updated. The team must ensure zero downtime and the ability to roll back instantly if the new version fails. They have a load balancer that can switch traffic between two identical environments. Which deployment strategy should they use?

A company exposes several microservices to external clients. They need to enforce authentication, rate limiting, and request routing to the appropriate service. They also want to hide the internal service topology from clients. Which component should they place at the edge?

Keep studying — Container and Microservices Lifecycle