Which cloud connectivity option provides a private, dedicated connection between an on-premises network and a cloud provider?

Site-to-site VPN over the internet

A company is deploying a new workload in the cloud and wants to ensure it is hardened before production. They also want to continuously monitor for vulnerabilities and runtime threats. Which set of actions should they take?

Use a golden image with hardened configurations, scan it for vulnerabilities, and deploy runtime protection agents.

Use a vulnerability scanner once before deployment and then disable it.

Apply all available patches to the workload after deployment.

Deploy the workload and rely on the cloud provider's default security settings.

What is the primary purpose of federated identity management in a cloud environment?

To allow users to access multiple cloud services using their existing corporate credentials

To provide a separate set of credentials for each cloud application

To store user passwords in the cloud

To encrypt all data stored in the cloud

What is the primary purpose of a cloud key management service (KMS)?

To centrally manage and protect encryption keys used by cloud services

To scan for vulnerabilities in cloud workloads

To provide single sign-on for cloud applications

GIAC Defensible Security Architect

Domain 5Objective 1

Cloud-Based Security Architecture GDSA Practice Questions (Page 10)

Part of the Cloud Security Architecture domain, which makes up ~10% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 5–8 from this objective — we provide 62 practice questions to prepare you well beyond it. (estimate)

62questions here

13free pages

14concepts

Questions 46–50

46foundation · easy
Which cloud connectivity option provides a private, dedicated connection between an on-premises network and a cloud provider?
Select an answer first
47application · medium
A company is deploying a new workload in the cloud and wants to ensure it is hardened before production. They also want to continuously monitor for vulnerabilities and runtime threats. Which set of actions should they take?
Select an answer first
48foundation · easy
What is the primary purpose of federated identity management in a cloud environment?
Select an answer first
49foundation · easy
Which cloud-native security service is designed to protect web applications from common attacks like SQL injection and cross-site scripting?
Select an answer first
50foundation · easy
What is the primary purpose of a cloud key management service (KMS)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GDSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDSA” is a trademark of its owner, used for identification only.