A company manages its security policies as code in a Git repository. They want to ensure that any change to a policy is tested against a set of sample resources before being merged and deployed. Which practice should they implement?

Use a CI pipeline that runs policy tests against sample resources on every pull request.

Deploy policy changes directly to production and monitor for issues.

Require two approvals from senior engineers before merging any policy change.

Use a pre-commit hook to format the policy code.

GIAC Cloud Security Automation

Domain 2Objective 3

Policy Enforcement GCSA Practice Questions (Page 9)

Part of the Cloud Security Automation and Compliance domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

6concepts

Questions 41–41

41application · medium
A company manages its security policies as code in a Git repository. They want to ensure that any change to a policy is tested against a set of sample resources before being merged and deployed. Which practice should they implement?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCSA” is a trademark of its owner, used for identification only.

Policy Enforcement GCSA Practice Questions (Page 9)

Questions 41–41

A company manages its security policies as code in a Git repository. They want to ensure that any change to a policy is tested against a set of sample resources before being merged and deployed. Which practice should they implement?

Keep studying — Cloud Security Automation and Compliance