A security team has a vulnerability management program that includes scanning, prioritization, remediation, and verification. However, the team is struggling with recurring vulnerabilities that reappear after remediation. What is the most likely root cause and what should be done?

The scanning frequency is too low, so vulnerabilities are missed.

The verification step is not being performed correctly.

The remediation is not addressing the root cause, such as a misconfiguration that is reverted by automated processes.

The prioritization is incorrect, so low-risk vulnerabilities are being fixed first.

A cloud administrator discovers that an Azure storage account has a network rule that allows access from 'All networks' instead of specific virtual networks. The storage account contains backup files that are not publicly accessible. What is the primary risk of this misconfiguration?

Inability to use Azure Backup service

Performance degradation for legitimate users

Increased cost due to network traffic

Data exfiltration by any internet user

When reporting a cloud vulnerability to non-technical stakeholders, which approach is most effective?

Explaining the business risk and potential impact in simple terms

Avoiding any mention of the vulnerability to prevent panic

Focusing on technical details like CVE identifiers and exploit code

Using complex network diagrams to illustrate the vulnerability

GIAC Cloud Threat Detection

Domain 3Objective 3

Cloud Vulnerability Analysis GCTD Practice Questions (Page 3)

Part of the Cloud Threat Detection and Response domain, which makes up ~25% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 4–7 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

8concepts

Questions 11–15

11foundation · easy
Which framework provides a structured set of security controls specifically designed for cloud service providers and customers to assess cloud security posture?
Select an answer first
12expert · hard
A security team has a vulnerability management program that includes scanning, prioritization, remediation, and verification. However, the team is struggling with recurring vulnerabilities that reappear after remediation. What is the most likely root cause and what should be done?
Select an answer first
13foundation · easy
Which cloud misconfiguration is most likely to result in a data breach if a storage bucket is set to 'public-read'?
Select an answer first
14application · medium
A cloud administrator discovers that an Azure storage account has a network rule that allows access from 'All networks' instead of specific virtual networks. The storage account contains backup files that are not publicly accessible. What is the primary risk of this misconfiguration?
Select an answer first
15foundation · easy
When reporting a cloud vulnerability to non-technical stakeholders, which approach is most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCTD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCTD” is a trademark of its owner, used for identification only.

Cloud Vulnerability Analysis GCTD Practice Questions (Page 3)

Questions 11–15

Which framework provides a structured set of security controls specifically designed for cloud service providers and customers to assess cloud security posture?

A security team has a vulnerability management program that includes scanning, prioritization, remediation, and verification. However, the team is struggling with recurring vulnerabilities that reappear after remediation. What is the most likely root cause and what should be done?

Which cloud misconfiguration is most likely to result in a data breach if a storage bucket is set to 'public-read'?

A cloud administrator discovers that an Azure storage account has a network rule that allows access from 'All networks' instead of specific virtual networks. The storage account contains backup files that are not publicly accessible. What is the primary risk of this misconfiguration?

When reporting a cloud vulnerability to non-technical stakeholders, which approach is most effective?

Keep studying — Cloud Threat Detection and Response