Which of the following is a primary security consideration when deploying a fleet of internet-connected sensors in a smart agriculture environment?

Configuring the sensors to broadcast their data to any nearby device for redundancy

Placing the sensors on the same flat network segment as the corporate finance systems

Ensuring the sensors use the same firmware version as the vendor's development devices

Implementing a mechanism to update the sensors' firmware securely over the network

A European company wants to use a US-based cloud provider to store personal data of EU citizens. They are concerned about GDPR compliance. Which action is MOST aligned with GDPR requirements?

Choose a cloud region located within the EU and sign a data processing agreement with the provider

Use a private cloud hosted in the US

Encrypt all data with the provider's default keys

Rely on the provider's compliance certifications

A company uses a cloud-based file storage service. They want to allow external partners to access specific files without giving them full account credentials. They also need to revoke access quickly if a partnership ends. Which approach is most appropriate?

Provide the partners with the admin credentials for the storage account.

Share the files using a public link that expires in 30 days.

Create a user account for each partner and assign them to a group with read-only permissions.

Use a single shared account for all partners and change the password when a partner leaves.

When an organization stores personal data of EU citizens in a public cloud, which regulatory requirement is most directly relevant to the cloud deployment?

The organization must use a private cloud exclusively

The data must be stored only on-premises

The organization must ensure appropriate safeguards for international data transfers

The cloud provider must be certified as SOC 2 Type II

A small business wants to move its customer relationship management (CRM) system to the cloud. They have no IT staff to manage servers or databases, but they need the ability to customize the CRM's data fields and workflows. Which cloud service model BEST fits their needs?

Infrastructure as a Service (IaaS)

GIAC Information Security Fundamentals

Domain 2Objective 3

Securing Connected and Cloud-Based Environments GISF Practice Questions (Page 5)

Part of the Network and Systems Security domain, which makes up ~28% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~14–22 in this domain), expect 5–7 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

8concepts

Questions 21–25

21foundation · easy
Which of the following is a primary security consideration when deploying a fleet of internet-connected sensors in a smart agriculture environment?
Select an answer first
22application · medium
A European company wants to use a US-based cloud provider to store personal data of EU citizens. They are concerned about GDPR compliance. Which action is MOST aligned with GDPR requirements?
Select an answer first
23expert · hard
A company uses a cloud-based file storage service. They want to allow external partners to access specific files without giving them full account credentials. They also need to revoke access quickly if a partnership ends. Which approach is most appropriate?
Select an answer first
24foundation · easy
When an organization stores personal data of EU citizens in a public cloud, which regulatory requirement is most directly relevant to the cloud deployment?
Select an answer first
25application · medium
A small business wants to move its customer relationship management (CRM) system to the cloud. They have no IT staff to manage servers or databases, but they need the ability to customize the CRM's data fields and workflows. Which cloud service model BEST fits their needs?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GISF

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISF” is a trademark of its owner, used for identification only.