A multinational company must comply with data residency laws that require customer data to remain within specific geographic boundaries. They also need to ensure low latency for users worldwide. Which cloud architecture BEST satisfies both requirements?

Use a single cloud region for all data and rely on CDN for latency

Use a global load balancer to route users to the nearest region, but store all data in one central region

Use a private cloud in one country and public cloud elsewhere

Deploy separate cloud instances in each required region and synchronize data only as allowed

A company uses a cloud-based project management tool. They want to automatically deprovision access when an employee leaves the company. Which approach is MOST effective?

Set a password expiration policy for all users

Integrate the tool with the corporate identity provider using SCIM for automated provisioning and deprovisioning

Manually delete the user account in the tool when notified by HR

Use a shared account for all employees

A hospital deploys IoT infusion pumps that connect to a central monitoring system. The pumps have limited processing power and cannot support modern encryption. The network team must balance security with device constraints. Which approach is BEST?

Place the pumps on an isolated network segment and use a gateway to translate to secure protocols

Disable encryption and rely on network segmentation only

Require the pumps to use WPA2 encryption directly

Replace all pumps with newer models that support encryption

A company uses a cloud-based HR system (SaaS) and wants employees to sign in with their existing corporate credentials. They also want to enforce multi-factor authentication (MFA) for all access. Which approach should they implement?

Create separate accounts in the HR system for each employee and enable MFA within that system

Use federated identity (e.g., SAML or OIDC) to connect the HR system to the corporate identity provider and enforce MFA there

Use the HR system's built-in social login (e.g., Google or Facebook)

Share the corporate Active Directory password database with the HR vendor

A company runs a web application in a cloud VPC with a public-facing load balancer and backend servers in a private subnet. They want to add a layer of defense against common web attacks like SQL injection. Which control is MOST appropriate?

Place a web application firewall (WAF) in front of the load balancer

Restrict the backend servers' security group to allow traffic only from the load balancer

GIAC Information Security Fundamentals

Domain 2Objective 3

Securing Connected and Cloud-Based Environments GISF Practice Questions (Page 9)

Part of the Network and Systems Security domain, which makes up ~28% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~14–22 in this domain), expect 5–7 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

8concepts

Questions 41–45

41expert · hard
A multinational company must comply with data residency laws that require customer data to remain within specific geographic boundaries. They also need to ensure low latency for users worldwide. Which cloud architecture BEST satisfies both requirements?
Select an answer first
42application · medium
A company uses a cloud-based project management tool. They want to automatically deprovision access when an employee leaves the company. Which approach is MOST effective?
Select an answer first
43expert · hard
A hospital deploys IoT infusion pumps that connect to a central monitoring system. The pumps have limited processing power and cannot support modern encryption. The network team must balance security with device constraints. Which approach is BEST?
Select an answer first
44application · medium
A company uses a cloud-based HR system (SaaS) and wants employees to sign in with their existing corporate credentials. They also want to enforce multi-factor authentication (MFA) for all access. Which approach should they implement?
Select an answer first
45application · medium
A company runs a web application in a cloud VPC with a public-facing load balancer and backend servers in a private subnet. They want to add a layer of defense against common web attacks like SQL injection. Which control is MOST appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GISF

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISF” is a trademark of its owner, used for identification only.