What is the primary purpose of network segmentation in a cloud environment?

To reduce the blast radius of a security breach by isolating workloads

To increase the speed of data transfer between resources

To simplify the management of public IP addresses

To eliminate the need for encryption

A company uses a cloud identity provider for all applications. They want to implement least-privilege access for a new analytics platform. Which approach is MOST effective?

Disable multi-factor authentication for analytics users to simplify access

Grant all users administrative access to the analytics platform

Create a role with only the permissions needed for analytics and assign it to the analytics service

Use the same role as the development team

A small business moves its email system to a cloud-based email service. They want to understand who is responsible for patching the email server software. According to the shared responsibility model, who is responsible?

Both the provider and the customer share equal responsibility for patching.

The customer, because they are responsible for all security in the cloud.

The cloud provider, because it is a SaaS offering.

The customer, because they are using the email service.

A security team needs to detect a potential data exfiltration from a cloud environment. Which combination of data sources would provide the MOST useful evidence?

Only the cloud provider's billing records

Cloud provider audit logs and VPC flow logs

Only the application's access logs

A startup is moving its application to a cloud provider. They want to minimize their responsibility for patching the operating system and middleware, but they still need to manage their application code and data. Which service model should they choose?

Infrastructure as a Service (IaaS)

GIAC Information Security Fundamentals

Domain 2Objective 3

Securing Connected and Cloud-Based Environments GISF Practice Questions (Page 6)

Part of the Network and Systems Security domain, which makes up ~28% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~14–22 in this domain), expect 5–7 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

8concepts

Questions 26–30

26foundation · easy
What is the primary purpose of network segmentation in a cloud environment?
Select an answer first
27expert · hard
A company uses a cloud identity provider for all applications. They want to implement least-privilege access for a new analytics platform. Which approach is MOST effective?
Select an answer first
28application · easy
A small business moves its email system to a cloud-based email service. They want to understand who is responsible for patching the email server software. According to the shared responsibility model, who is responsible?
Select an answer first
29application · medium
A security team needs to detect a potential data exfiltration from a cloud environment. Which combination of data sources would provide the MOST useful evidence?
Select an answer first
30application · medium
A startup is moving its application to a cloud provider. They want to minimize their responsibility for patching the operating system and middleware, but they still need to manage their application code and data. Which service model should they choose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GISF

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISF” is a trademark of its owner, used for identification only.