A government agency is considering a cloud deployment for sensitive data that must remain within the country's borders. The agency also needs to share the infrastructure with partner agencies to reduce costs. Which deployment model best meets these requirements?

Hybrid cloud, because it combines public and private and ensures data stays on-premises

Community cloud, with a provider that offers a region located within the required country

Private cloud, because it provides exclusive use and guarantees data residency

Public cloud, because it is the most cost-effective and can be configured to meet data residency

In cloud IAM, what is the primary purpose of a role?

To provide a unique identifier for each user

To define a set of permissions that can be assigned to users or services

What is the primary benefit of centralized cloud monitoring for incident response?

It provides a single view of security events across multiple services and accounts

It eliminates the need for any manual investigation

It prevents all unauthorized access

It automatically patches all vulnerabilities

During an incident, a forensic analyst needs to preserve the state of a virtual machine at a specific point in time. What is the most forensically sound method available in a virtualized environment?

Power off the VM and copy the virtual disk file while the VM is off

Use the VM's built-in backup agent to back up files to a network share

Take a screenshot of the VM console and save it as evidence

Create a snapshot of the VM, then export the snapshot's disk files and memory state

GIAC Enterprise Incident Responder

Domain 2Objective 1

Foundational Cloud Concepts GEIR Practice Questions (Page 1)

Part of the Cloud and Container Forensics domain, which makes up ~29% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~20–35 in this domain), expect 7–12 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

8concepts

Questions 1–5

1expert · hard
A government agency is considering a cloud deployment for sensitive data that must remain within the country's borders. The agency also needs to share the infrastructure with partner agencies to reduce costs. Which deployment model best meets these requirements?
Select an answer first
2foundation · easy
In cloud IAM, what is the primary purpose of a role?
Select an answer first
3foundation · easy
Which cloud storage type is best suited for long-term archival of forensic evidence that must be retained for several years?
Select an answer first
4foundation · easy
What is the primary benefit of centralized cloud monitoring for incident response?
Select an answer first
5application · medium
During an incident, a forensic analyst needs to preserve the state of a virtual machine at a specific point in time. What is the most forensically sound method available in a virtualized environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GEIR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GEIR” is a trademark of its owner, used for identification only.