What is the primary purpose of federated identity management in a cloud environment?

To synchronize user passwords across multiple cloud providers

To allow users to use their existing corporate credentials to access cloud resources

To create separate identities for each cloud application

To encrypt all data stored in the cloud

A healthcare organization stores patient records in a cloud object storage service. They must protect the data at rest and control access. Which combination of controls provides the STRONGEST protection?

Enable versioning and logging only

Rely on the cloud provider's default encryption and make the bucket public for easy access

Use client-side encryption but do not manage access permissions

Enable server-side encryption with customer-managed keys and restrict bucket access with IAM policies

Which encryption approach is most appropriate for protecting data that is actively being processed by a cloud application?

Using TLS to encrypt the data while it is in transit between the application and database

Applying database-level transparent data encryption

Encrypting the data with a customer-managed key before storing it

Using confidential computing techniques such as secure enclaves

A company uses a cloud-based HR system and wants employees to sign in with their existing corporate credentials. They also want to enforce multi-factor authentication (MFA) for all cloud access. Which approach best meets these requirements?

Use the cloud provider's built-in user directory and enable MFA only for administrators.

Share a single generic account for all employees and rely on IP allowlisting.

Create separate cloud accounts for each employee and require a strong password.

Configure federation with SAML between the corporate identity provider and the cloud HR system, and enable MFA on the corporate identity provider.

GIAC Information Security Fundamentals

Domain 2Objective 3

Securing Connected and Cloud-Based Environments GISF Practice Questions (Page 1)

Part of the Network and Systems Security domain, which makes up ~28% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~14–22 in this domain), expect 5–7 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

8concepts

Questions 1–5

1foundation · easy
What is the primary purpose of federated identity management in a cloud environment?
Select an answer first
2application · medium
A healthcare organization stores patient records in a cloud object storage service. They must protect the data at rest and control access. Which combination of controls provides the STRONGEST protection?
Select an answer first
3foundation · easy
Which cloud deployment model is characterized by infrastructure that is provisioned for exclusive use by a single organization, but may be managed by the organization itself, a third party, or a combination of them?
Select an answer first
4foundation · easy
Which encryption approach is most appropriate for protecting data that is actively being processed by a cloud application?
Select an answer first
5application · medium
A company uses a cloud-based HR system and wants employees to sign in with their existing corporate credentials. They also want to enforce multi-factor authentication (MFA) for all cloud access. Which approach best meets these requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GISF

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISF” is a trademark of its owner, used for identification only.