A company wants to use a cloud service where they only manage the application data and user access, while the provider handles the operating system, runtime, and infrastructure. Which cloud service model best fits this requirement?

Infrastructure as a Service (IaaS)

A government agency requires that its data be stored on infrastructure dedicated solely to the agency. They also want to use cloud services for scalability. Which deployment model meets the dedicated infrastructure requirement?

Private cloud hosted by a third-party provider.

Community cloud shared with other agencies.

Public cloud with a dedicated region.

Hybrid cloud with public cloud for storage.

A company's cloud environment is compromised. The incident response team needs to preserve evidence while maintaining business continuity. The affected system is a critical application server that cannot be taken offline. Which approach best balances forensics and availability?

Take a snapshot of the server's disk and capture memory using a cloud-based memory capture tool, then continue running the server.

Rely on the cloud provider's automatic backups and continue running the server.

Clone the server to a new instance and shut down the original.

Immediately power off the server to preserve memory and disk.

A company is moving a virtual machine to an IaaS cloud offering. According to the shared responsibility model, which security control is the customer responsible for implementing?

Securing the physical network switches

Hardening the guest operating system

Updating the firmware of the storage arrays

Managing the virtualization host

GIAC Information Security Fundamentals

Domain 2Objective 3

Securing Connected and Cloud-Based Environments GISF Practice Questions (Page 11)

Part of the Network and Systems Security domain, which makes up ~28% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~14–22 in this domain), expect 5–7 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

8concepts

Questions 51–54

51foundation · easy
A company wants to use a cloud service where they only manage the application data and user access, while the provider handles the operating system, runtime, and infrastructure. Which cloud service model best fits this requirement?
Select an answer first
52expert · hard
A government agency requires that its data be stored on infrastructure dedicated solely to the agency. They also want to use cloud services for scalability. Which deployment model meets the dedicated infrastructure requirement?
Select an answer first
53expert · hard
A company's cloud environment is compromised. The incident response team needs to preserve evidence while maintaining business continuity. The affected system is a critical application server that cannot be taken offline. Which approach best balances forensics and availability?
Select an answer first
54foundation · easy
A company is moving a virtual machine to an IaaS cloud offering. According to the shared responsibility model, which security control is the customer responsible for implementing?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GISF

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISF” is a trademark of its owner, used for identification only.