An organization stores sensitive customer data in a cloud object storage bucket. A compliance audit requires that the bucket be private and that all data be encrypted at rest. The security team wants to continuously verify that no bucket has been made public and that encryption is enabled. What should the team configure?

Apply a bucket policy that denies all public access and enable default encryption

Enable access logging on the bucket and store logs in a separate logging bucket

Set up a monitoring rule that checks bucket policies and encryption settings, and alerts on any changes

Create a lifecycle rule to transition the bucket's data to cold storage after one year

A database administrator notices that a cloud database's connection count is near its maximum limit and query latency has increased. The administrator suspects that a specific application is opening too many connections. Which monitoring data would best confirm this suspicion?

Backup job status reports for the database

Database audit logs showing the source IP and application name for each connection

Network throughput metrics for the database endpoint

Storage utilization metrics for the database's underlying disk

In cloud data and storage monitoring, which three core components are typically collected and analyzed to provide visibility into storage health and activity?

Snapshots, replicas, and archives

Buckets, volumes, and filesystems

Policies, roles, and permissions

GIAC Cloud Threat Detection

Domain 2Objective 3

Data and Storage Monitoring GCTD Practice Questions (Page 4)

Part of the Cloud Infrastructure Monitoring domain, which makes up ~37% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~19–30 in this domain), expect 5–8 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

8concepts

Questions 16–20

16application · medium
An organization stores sensitive customer data in a cloud object storage bucket. A compliance audit requires that the bucket be private and that all data be encrypted at rest. The security team wants to continuously verify that no bucket has been made public and that encryption is enabled. What should the team configure?
Select an answer first
17foundation · easy
Which integration would allow a storage monitoring alert to automatically create a ticket in a company's incident management system?
Select an answer first
18foundation · easy
An analyst notices a user downloading a large volume of data from a storage bucket at an unusual hour. Which monitoring activity would best help confirm whether this is anomalous?
Select an answer first
19application · medium
A database administrator notices that a cloud database's connection count is near its maximum limit and query latency has increased. The administrator suspects that a specific application is opening too many connections. Which monitoring data would best confirm this suspicion?
Select an answer first
20foundation · easy
In cloud data and storage monitoring, which three core components are typically collected and analyzed to provide visibility into storage health and activity?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCTD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCTD” is a trademark of its owner, used for identification only.

Data and Storage Monitoring GCTD Practice Questions (Page 4)

Questions 16–20

Which integration would allow a storage monitoring alert to automatically create a ticket in a company's incident management system?

An analyst notices a user downloading a large volume of data from a storage bucket at an unusual hour. Which monitoring activity would best help confirm whether this is anomalous?

A database administrator notices that a cloud database's connection count is near its maximum limit and query latency has increased. The administrator suspects that a specific application is opening too many connections. Which monitoring data would best confirm this suspicion?

In cloud data and storage monitoring, which three core components are typically collected and analyzed to provide visibility into storage health and activity?

Keep studying — Cloud Infrastructure Monitoring