Which statement correctly describes a fundamental difference between symmetric and asymmetric encryption?

Asymmetric encryption is faster than symmetric encryption for bulk data

Symmetric encryption requires a public key infrastructure, while asymmetric does not

Symmetric encryption is always more secure than asymmetric encryption

Symmetric encryption uses the same key for encryption and decryption, while asymmetric encryption uses a public/private key pair

What is the purpose of secure deletion in cloud storage?

To create a backup of data before deletion

To move data to a cheaper storage tier

To encrypt data before deletion

To ensure that deleted data cannot be recovered

Which of the following is a common capability of a cloud DLP service?

Managing encryption keys for cloud services

Scanning objects in cloud storage for sensitive data patterns

Automatically patching operating systems

Providing a virtual firewall for the cloud network

A company runs a web application on Google Cloud behind a global load balancer. They want to ensure that all traffic between the client and the load balancer is encrypted with TLS 1.2 or higher. They also want to verify that the certificate is valid and not expired. What is the most effective way to enforce and verify this?

Configure the load balancer to use a Google-managed SSL certificate and set the minimum TLS version to 1.2.

Enable HTTP/2 and assume that all traffic is encrypted.

Use a self-signed certificate and rely on client-side validation.

Use a TCP proxy load balancer and terminate TLS at the backend.

Why is it important to encrypt backups in a cloud environment?

To protect the confidentiality of data if backup media is lost or accessed without authorization

To make backups easier to restore

To reduce the storage cost of backups

GIAC Public Cloud Security

Domain 2Objective 1

Cloud Data Protection GPCS Practice Questions (Page 9)

Part of the Cloud Platform and Service Security domain, which makes up ~60% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~30–48 in this domain), expect 6–10 from this objective — we provide 55 practice questions to prepare you well beyond it. (estimate)

55questions here

11free pages

13concepts

Questions 41–45

41foundation · easy
Which statement correctly describes a fundamental difference between symmetric and asymmetric encryption?
Select an answer first
42foundation · easy
What is the purpose of secure deletion in cloud storage?
Select an answer first
43foundation · easy
Which of the following is a common capability of a cloud DLP service?
Select an answer first
44expert · hard
A company runs a web application on Google Cloud behind a global load balancer. They want to ensure that all traffic between the client and the load balancer is encrypted with TLS 1.2 or higher. They also want to verify that the certificate is valid and not expired. What is the most effective way to enforce and verify this?
Select an answer first
45foundation · easy
Why is it important to encrypt backups in a cloud environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GPCS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPCS” is a trademark of its owner, used for identification only.