A security engineer is assessing a cloud environment and finds that a serverless function has an overly permissive IAM role that allows it to invoke any other function in the account. The function is publicly accessible via an API gateway. What is the most significant risk?

An attacker could cause a denial of service by invoking the function repeatedly

An attacker could read the function's environment variables

An attacker could invoke the function to access other functions' data

An attacker could modify the function's code

Which remediation strategy is most appropriate for a cloud misconfiguration that exposes a management console to the internet?

Restricting access to the management console via network controls

Ignoring the issue if no one has exploited it

Deleting the management console

A security team discovers that an Azure VM has a critical vulnerability in the operating system. The VM is part of a production application and cannot be rebooted during business hours. What is the most appropriate remediation strategy?

Replace the VM with a new one that has the latest patches.

Apply the patch immediately and reboot the VM, even during business hours.

Schedule the patch installation during a maintenance window and reboot the VM as needed.

Do not patch the VM until the next scheduled maintenance window, even if it takes weeks.

GIAC Cloud Threat Detection

Domain 3Objective 3

Cloud Vulnerability Analysis GCTD Practice Questions (Page 2)

Part of the Cloud Threat Detection and Response domain, which makes up ~25% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 4–7 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

8concepts

Questions 6–10

6expert · hard
A security engineer is assessing a cloud environment and finds that a serverless function has an overly permissive IAM role that allows it to invoke any other function in the account. The function is publicly accessible via an API gateway. What is the most significant risk?
Select an answer first
7foundation · easy
Which remediation strategy is most appropriate for a cloud misconfiguration that exposes a management console to the internet?
Select an answer first
8foundation · easy
Which of the following is a common cloud vulnerability that arises when a cloud storage bucket is configured to allow public read access to sensitive data?
Select an answer first
9foundation · easy
Which cloud-native service is designed to scan serverless functions for vulnerabilities and misconfigurations?
Select an answer first
10application · medium
A security team discovers that an Azure VM has a critical vulnerability in the operating system. The VM is part of a production application and cannot be rebooted during business hours. What is the most appropriate remediation strategy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCTD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCTD” is a trademark of its owner, used for identification only.

Cloud Vulnerability Analysis GCTD Practice Questions (Page 2)

Questions 6–10

A security engineer is assessing a cloud environment and finds that a serverless function has an overly permissive IAM role that allows it to invoke any other function in the account. The function is publicly accessible via an API gateway. What is the most significant risk?

Which remediation strategy is most appropriate for a cloud misconfiguration that exposes a management console to the internet?

Which of the following is a common cloud vulnerability that arises when a cloud storage bucket is configured to allow public read access to sensitive data?

Which cloud-native service is designed to scan serverless functions for vulnerabilities and misconfigurations?

A security team discovers that an Azure VM has a critical vulnerability in the operating system. The VM is part of a production application and cannot be rebooted during business hours. What is the most appropriate remediation strategy?

Keep studying — Cloud Threat Detection and Response