Which access control model evaluates attributes such as user department, resource tag, and time of day to make access decisions?

Role-based access control (RBAC)

Attribute-based access control (ABAC)

Discretionary access control (DAC)

In RBAC, what is a 'role'?

A collection of permissions that can be assigned to users or groups

A type of multi-factor authentication

A physical device used to access the cloud

What is the primary purpose of multi-factor authentication (MFA)?

To require users to change their passwords frequently

To add an extra layer of security by requiring two or more verification factors

To eliminate the need for passwords entirely

To provide a single sign-on experience across all applications

A company uses Google Cloud and wants to grant a team of data engineers the ability to create and manage BigQuery datasets, but not delete them. The company wants to follow least privilege and avoid creating custom roles if possible. What should they do?

Assign the BigQuery Job User role to the team.

Assign the BigQuery Data Editor role to the team.

Assign the BigQuery Data Owner role to the team.

Create a custom role with permissions to create and update datasets but not delete.

Why are periodic access reviews important in identity lifecycle management?

They increase the number of permissions assigned to each user.

They replace the need for multi-factor authentication.

They ensure that users retain access that is appropriate for their current role and that no excessive permissions remain.

They automatically rotate all cryptographic keys in the cloud environment.

GIAC Public Cloud Security

Domain 2Objective 2

Cloud Identity and Access Management GPCS Practice Questions (Page 5)

Part of the Cloud Platform and Service Security domain, which makes up ~60% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~30–48 in this domain), expect 6–10 from this objective — we provide 59 practice questions to prepare you well beyond it. (estimate)

59questions here

12free pages

12concepts

Questions 21–25

21foundation · easy
Which access control model evaluates attributes such as user department, resource tag, and time of day to make access decisions?
Select an answer first
22foundation · easy
In RBAC, what is a 'role'?
Select an answer first
23foundation · easy
What is the primary purpose of multi-factor authentication (MFA)?
Select an answer first
24application · medium
A company uses Google Cloud and wants to grant a team of data engineers the ability to create and manage BigQuery datasets, but not delete them. The company wants to follow least privilege and avoid creating custom roles if possible. What should they do?
Select an answer first
25foundation · easy
Why are periodic access reviews important in identity lifecycle management?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GPCS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPCS” is a trademark of its owner, used for identification only.