A company's cloud environment has a virtual network with multiple subnets. They want to detect and respond to lateral movement between subnets. Which combination of controls is most effective?

Use a single subnet for all resources to simplify monitoring.

Rely on the cloud provider's default security monitoring.

Use network security groups to block all traffic between subnets.

Enable flow logs and deploy a cloud-based intrusion detection system (IDS) that analyzes the logs.

A government contractor must comply with FedRAMP requirements for a cloud system. Which step is MOST critical to achieve and maintain compliance?

Implement multi-factor authentication for all users

Perform a self-assessment and declare compliance

Select a cloud provider that has a FedRAMP-authorized offering

A manufacturing company installs hundreds of IoT sensors on the production floor. The sensors connect to a central controller that reports to the cloud. The security team is concerned about the sensors being used as a pivot point. Which control best reduces that risk while keeping the sensors operational?

Assign each sensor a public IP address so it can be monitored directly from the internet.

Disable all encryption on sensor traffic to reduce latency and simplify troubleshooting.

Place the sensors on a separate VLAN with strict firewall rules that only allow traffic to the central controller.

Connect all sensors to the same flat network as the corporate workstations for easier management.

In the cloud shared responsibility model, which of the following is typically the customer's responsibility regardless of the service model?

Configuration of identity and access management for their users

Physical security of the data center

Patching the underlying operating system in IaaS

A manufacturing company has deployed hundreds of IoT sensors on the factory floor that report to a cloud-based monitoring platform. The sensors are on a dedicated network segment, but the IT team is concerned about the risk of a compromised sensor being used to pivot to other systems. Which control would MOST directly reduce that risk?

Enable encryption on all sensor-to-cloud communication

Deploy a network intrusion detection system on the sensor segment

Apply firmware updates to all sensors

Configure the sensor network with strict egress firewall rules and deny all traffic except to the cloud platform

GIAC Information Security Fundamentals

Domain 2Objective 3

Securing Connected and Cloud-Based Environments GISF Practice Questions (Page 4)

Part of the Network and Systems Security domain, which makes up ~28% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~14–22 in this domain), expect 5–7 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

8concepts

Questions 16–20

16expert · hard
A company's cloud environment has a virtual network with multiple subnets. They want to detect and respond to lateral movement between subnets. Which combination of controls is most effective?
Select an answer first
17application · medium
A government contractor must comply with FedRAMP requirements for a cloud system. Which step is MOST critical to achieve and maintain compliance?
Select an answer first
18application · medium
A manufacturing company installs hundreds of IoT sensors on the production floor. The sensors connect to a central controller that reports to the cloud. The security team is concerned about the sensors being used as a pivot point. Which control best reduces that risk while keeping the sensors operational?
Select an answer first
19foundation · easy
In the cloud shared responsibility model, which of the following is typically the customer's responsibility regardless of the service model?
Select an answer first
20application · medium
A manufacturing company has deployed hundreds of IoT sensors on the factory floor that report to a cloud-based monitoring platform. The sensors are on a dedicated network segment, but the IT team is concerned about the risk of a compromised sensor being used to pivot to other systems. Which control would MOST directly reduce that risk?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GISF

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISF” is a trademark of its owner, used for identification only.

Securing Connected and Cloud-Based Environments GISF Practice Questions (Page 4)

Questions 16–20

A company's cloud environment has a virtual network with multiple subnets. They want to detect and respond to lateral movement between subnets. Which combination of controls is most effective?

A government contractor must comply with FedRAMP requirements for a cloud system. Which step is MOST critical to achieve and maintain compliance?

In the cloud shared responsibility model, which of the following is typically the customer's responsibility regardless of the service model?

Keep studying — Network and Systems Security