A company uses Azure Functions for a serverless application. The security team wants to scan the function code for vulnerabilities and misconfigurations. Which tool is best suited for this?

Azure Security Center (now Microsoft Defender for Cloud) with serverless workload protection

A security team has limited resources and must prioritize remediation of the following cloud vulnerabilities: (1) a critical RCE in a public-facing web application, (2) a high-severity vulnerability in an internal database that is not internet-exposed, (3) a medium-severity misconfiguration in a storage bucket that contains non-sensitive public data, and (4) a low-severity issue in a development environment. The web application is critical to business operations and cannot be taken offline easily. What is the best prioritization strategy?

Remediate all vulnerabilities at the same time to minimize risk.

Remediate the storage bucket first because it is a misconfiguration, then the RCE, then the database, and finally the development issue.

Remediate the internal database first because it is high severity, then the RCE, then the storage bucket, and finally the development issue.

Remediate the critical RCE first, then the internal database, then the storage bucket, and finally the development issue.

A company uses a mix of AWS, Azure, and GCP. The security team needs to scan all cloud resources for vulnerabilities and misconfigurations. They want a single tool that can provide a unified view. Which approach is most effective?

Use a network vulnerability scanner to scan all cloud IP addresses.

Use a single cloud provider's security tool for all resources.

Use each provider's native security tool and manually combine the results.

Use a third-party multi-cloud security posture management (CSPM) tool that integrates with all three providers.

A security team discovers that an AWS S3 bucket has 'Block all public access' disabled and a bucket policy that allows 's3:GetObject' to 'Principal': '*'. The bucket contains sensitive customer data. What is the most immediate risk?

Denial of service attacks on the bucket.

Data deletion by unauthorized users.

Unauthorized access to sensitive data by anyone on the internet.

Data modification by unauthorized users.

GIAC Cloud Threat Detection

Domain 3Objective 3

Cloud Vulnerability Analysis GCTD Practice Questions (Page 7)

Part of the Cloud Threat Detection and Response domain, which makes up ~25% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 4–7 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

8concepts

Questions 31–35

31application · medium
A company uses Azure Functions for a serverless application. The security team wants to scan the function code for vulnerabilities and misconfigurations. Which tool is best suited for this?
Select an answer first
32expert · hard
A security team has limited resources and must prioritize remediation of the following cloud vulnerabilities: (1) a critical RCE in a public-facing web application, (2) a high-severity vulnerability in an internal database that is not internet-exposed, (3) a medium-severity misconfiguration in a storage bucket that contains non-sensitive public data, and (4) a low-severity issue in a development environment. The web application is critical to business operations and cannot be taken offline easily. What is the best prioritization strategy?
Select an answer first
33expert · hard
A company uses a mix of AWS, Azure, and GCP. The security team needs to scan all cloud resources for vulnerabilities and misconfigurations. They want a single tool that can provide a unified view. Which approach is most effective?
Select an answer first
34foundation · easy
Which of the following is a recognized list of cloud-specific security risks published by OWASP?
Select an answer first
35application · medium
A security team discovers that an AWS S3 bucket has 'Block all public access' disabled and a bucket policy that allows 's3:GetObject' to 'Principal': '*'. The bucket contains sensitive customer data. What is the most immediate risk?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCTD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCTD” is a trademark of its owner, used for identification only.

Cloud Vulnerability Analysis GCTD Practice Questions (Page 7)

Questions 31–35

A company uses Azure Functions for a serverless application. The security team wants to scan the function code for vulnerabilities and misconfigurations. Which tool is best suited for this?

A company uses a mix of AWS, Azure, and GCP. The security team needs to scan all cloud resources for vulnerabilities and misconfigurations. They want a single tool that can provide a unified view. Which approach is most effective?

Which of the following is a recognized list of cloud-specific security risks published by OWASP?

A security team discovers that an AWS S3 bucket has 'Block all public access' disabled and a bucket policy that allows 's3:GetObject' to 'Principal': '*'. The bucket contains sensitive customer data. What is the most immediate risk?

Keep studying — Cloud Threat Detection and Response