What is the primary goal of hardening a cloud workload?

To increase the workload's processing speed

To enable automatic scaling of the workload

To reduce the attack surface by removing unnecessary services and applying security configurations

To simplify the management of the workload

What is the primary purpose of threat modeling in cloud security?

To monitor network traffic in real time

To encrypt all data in the cloud

To identify potential threats and vulnerabilities in the architecture and prioritize mitigations

To automatically patch vulnerabilities in cloud workloads

Which cloud IAM practice adds an additional layer of security beyond a username and password?

Multi-factor authentication (MFA)

Role-based access control (RBAC)

A company uses AWS and wants to detect suspicious API activity, such as unauthorized attempts to access S3 buckets, and trigger an automated response. Which services should they combine?

AWS Shield Advanced, AWS WAF, and Amazon Route 53.

Amazon CloudWatch, AWS CloudFormation, and AWS IAM.

AWS CloudTrail, Amazon GuardDuty, and AWS Lambda.

AWS Config, AWS Trusted Advisor, and AWS Inspector.

GIAC Defensible Security Architect

Domain 5Objective 1

Cloud-Based Security Architecture GDSA Practice Questions (Page 4)

Part of the Cloud Security Architecture domain, which makes up ~10% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 5–8 from this objective — we provide 62 practice questions to prepare you well beyond it. (estimate)

62questions here

13free pages

14concepts

Questions 16–20

16foundation · easy
What is the primary goal of hardening a cloud workload?
Select an answer first
17foundation · easy
What is the primary purpose of threat modeling in cloud security?
Select an answer first
18foundation · easy
Which cloud IAM practice adds an additional layer of security beyond a username and password?
Select an answer first
19application · medium
A company uses AWS and wants to detect suspicious API activity, such as unauthorized attempts to access S3 buckets, and trigger an automated response. Which services should they combine?
Select an answer first
20foundation · easy
What is the first step in an effective cloud incident response process?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GDSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDSA” is a trademark of its owner, used for identification only.