In a hub-and-spoke network architecture, what is the primary purpose of the hub?

To centralize connectivity and security controls

To provide internet access to all spokes

A company wants to protect their cloud resources from common web attacks and also filter malicious traffic before it reaches their application servers. They want to use a cloud-native service. Which service should they use?

A VPN that requires all users to connect through it.

A network ACL that blocks all inbound traffic.

A cloud firewall that filters based on source IP.

A web application firewall (WAF) integrated with their load balancer.

A company is deploying a web application on Azure that will be publicly accessible. They are concerned about DDoS attacks and application-layer attacks such as SQL injection. They also need to ensure that traffic from a specific partner's office is prioritized. Which combination of services should they implement?

Azure Firewall with threat intelligence-based filtering and a network security group.

Azure DDoS Protection Standard and Azure WAF with custom rules for partner traffic.

Azure Bastion and Azure DDoS Protection Standard.

Azure Application Gateway with WAF and Azure Front Door.

GIAC Defensible Security Architect

Domain 5Objective 1

Cloud-Based Security Architecture GDSA Practice Questions (Page 3)

Part of the Cloud Security Architecture domain, which makes up ~10% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 5–8 from this objective — we provide 62 practice questions to prepare you well beyond it. (estimate)

62questions here

13free pages

14concepts

Questions 11–15

11foundation · easy
Which security principle is demonstrated by granting a cloud administrator only the permissions required to perform their daily tasks?
Select an answer first
12foundation · easy
In a hub-and-spoke network architecture, what is the primary purpose of the hub?
Select an answer first
13application · medium
A company wants to protect their cloud resources from common web attacks and also filter malicious traffic before it reaches their application servers. They want to use a cloud-native service. Which service should they use?
Select an answer first
14foundation · easy
Which threat is specific to cloud environments and involves a user or service obtaining more privileges than intended?
Select an answer first
15expert · hard
A company is deploying a web application on Azure that will be publicly accessible. They are concerned about DDoS attacks and application-layer attacks such as SQL injection. They also need to ensure that traffic from a specific partner's office is prioritized. Which combination of services should they implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GDSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDSA” is a trademark of its owner, used for identification only.

Cloud-Based Security Architecture GDSA Practice Questions (Page 3)

Questions 11–15

Which security principle is demonstrated by granting a cloud administrator only the permissions required to perform their daily tasks?

In a hub-and-spoke network architecture, what is the primary purpose of the hub?

A company wants to protect their cloud resources from common web attacks and also filter malicious traffic before it reaches their application servers. They want to use a cloud-native service. Which service should they use?

Which threat is specific to cloud environments and involves a user or service obtaining more privileges than intended?

Keep studying — Cloud Security Architecture