A company is deploying a microservice that handles sensitive customer data. They need to ensure that secrets, such as API keys and database passwords, are not exposed in logs or configuration files. Which practice should they implement?

Use a secrets management service and inject secrets as environment variables, and ensure logging does not output them

Store secrets in a ConfigMap and reference them in the deployment

Log all environment variables for debugging purposes

Embed secrets in the container image and rely on image access controls

A company is building a CI/CD pipeline for its microservices. The pipeline must automatically build container images, run unit and integration tests, scan for vulnerabilities, and deploy to a Kubernetes cluster only if all checks pass. Which pipeline stage order best meets these requirements?

Run tests → build image → deploy to Kubernetes → scan image

Build image → run tests → scan image → deploy to Kubernetes

Deploy to Kubernetes → run tests → scan image → build image

Scan image → deploy to Kubernetes → run tests → build image

GIAC Cloud Security Automation

Domain 4Objective 2

Microservices Architecture and Deployment GCSA Practice Questions (Page 8)

Part of the Container and Microservices Lifecycle domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

10concepts

Questions 36–37

36application · medium
A company is deploying a microservice that handles sensitive customer data. They need to ensure that secrets, such as API keys and database passwords, are not exposed in logs or configuration files. Which practice should they implement?
Select an answer first
37application · medium
A company is building a CI/CD pipeline for its microservices. The pipeline must automatically build container images, run unit and integration tests, scan for vulnerabilities, and deploy to a Kubernetes cluster only if all checks pass. Which pipeline stage order best meets these requirements?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCSA” is a trademark of its owner, used for identification only.

Microservices Architecture and Deployment GCSA Practice Questions (Page 8)

Questions 36–37

A company is deploying a microservice that handles sensitive customer data. They need to ensure that secrets, such as API keys and database passwords, are not exposed in logs or configuration files. Which practice should they implement?

A company is building a CI/CD pipeline for its microservices. The pipeline must automatically build container images, run unit and integration tests, scan for vulnerabilities, and deploy to a Kubernetes cluster only if all checks pass. Which pipeline stage order best meets these requirements?

Keep studying — Container and Microservices Lifecycle