Which activity is an example of cloud governance?

Setting up a virtual private cloud

Defining policies for resource provisioning and access

A financial services firm must meet strict regulatory requirements that mandate data residency within a specific country. They also want to leverage cloud scalability but need to keep some legacy systems on-premises. Which deployment model should they choose?

Private cloud hosted in a third-party data center within the country.

Hybrid cloud with a public cloud region in the required country and on-premises infrastructure.

Public cloud with a region located in the required country.

Community cloud shared with other financial institutions in the same country.

A company is planning to migrate a critical application to the cloud. They have identified a threat where a compromised workload could be used to access other workloads in the same VPC. They want to limit the blast radius. Which control should they prioritize?

Use a WAF to protect the application from external attacks.

Implement micro-segmentation to restrict east-west traffic between workloads.

Enable MFA for all administrative access.

Use a cloud DDoS protection service.

Which cloud provider feature allows you to restrict access to a storage bucket based on the requester's IP address?

Bucket policy with condition keys

Cross-origin resource sharing (CORS)

GIAC Defensible Security Architect

Domain 5Objective 1

Cloud-Based Security Architecture GDSA Practice Questions (Page 6)

Part of the Cloud Security Architecture domain, which makes up ~10% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 5–8 from this objective — we provide 62 practice questions to prepare you well beyond it. (estimate)

62questions here

13free pages

14concepts

Questions 26–30

26application · medium
A government agency needs to share a cloud environment with several other agencies that have similar security requirements. They want to reduce costs by sharing infrastructure but need to ensure that each agency's data is isolated. Which cloud deployment model should they choose?
Select an answer first
27foundation · easy
Which activity is an example of cloud governance?
Select an answer first
28application · medium
A financial services firm must meet strict regulatory requirements that mandate data residency within a specific country. They also want to leverage cloud scalability but need to keep some legacy systems on-premises. Which deployment model should they choose?
Select an answer first
29expert · hard
A company is planning to migrate a critical application to the cloud. They have identified a threat where a compromised workload could be used to access other workloads in the same VPC. They want to limit the blast radius. Which control should they prioritize?
Select an answer first
30foundation · easy
Which cloud provider feature allows you to restrict access to a storage bucket based on the requester's IP address?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GDSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDSA” is a trademark of its owner, used for identification only.