What is a privileged access workstation (PAW)?

A dedicated, hardened computer used exclusively for administrative tasks

A network firewall that filters traffic to cloud resources

A virtual machine used for general employee web browsing

A server that stores all user passwords in plaintext

What is the role of an identity provider (IdP) in federated identity management?

It stores all cloud resource data for the organization.

It authenticates users and issues assertions about their identity to service providers.

It manages the physical servers in the cloud data center.

It encrypts all network traffic between the user and the cloud.

Which scenario is best suited for attribute-based access control (ABAC)?

Granting all employees in the finance department access to financial reports only during business hours

Granting access to a user because they are in the company's Active Directory group

Granting access based on the user's manager's approval

Granting a user access because they hold the 'admin' role

A development team is building an application that runs on Azure VMs and needs to access an Azure Key Vault to retrieve secrets. The team wants to avoid storing credentials in code and ensure the application has only the necessary permissions. What should they use?

Create a service principal and embed its client secret in the application code.

Use a managed identity for the VM and assign it the Key Vault Secrets User role.

Create a user account for the application and store its password in the application's configuration file.

Use the VM's local administrator account to authenticate to Key Vault.

GIAC Public Cloud Security

Domain 2Objective 2

Cloud Identity and Access Management GPCS Practice Questions (Page 11)

Part of the Cloud Platform and Service Security domain, which makes up ~60% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~30–48 in this domain), expect 6–10 from this objective — we provide 59 practice questions to prepare you well beyond it. (estimate)

59questions here

12free pages

12concepts

Questions 51–55

51foundation · easy
Which principle states that a user or service should be granted only the minimum permissions necessary to perform their job?
Select an answer first
52foundation · easy
What is a privileged access workstation (PAW)?
Select an answer first
53foundation · easy
What is the role of an identity provider (IdP) in federated identity management?
Select an answer first
54foundation · easy
Which scenario is best suited for attribute-based access control (ABAC)?
Select an answer first
55application · medium
A development team is building an application that runs on Azure VMs and needs to access an Azure Key Vault to retrieve secrets. The team wants to avoid storing credentials in code and ensure the application has only the necessary permissions. What should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GPCS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPCS” is a trademark of its owner, used for identification only.