A security architect is designing connectivity between a company's on-premises data center and a cloud VNet. The requirement is a private, dedicated, high-bandwidth connection that does not traverse the public internet. Which connectivity option should the architect choose?

Site-to-Site VPN over the internet

After running a benchmark assessment on a cloud environment, what does a deviation from the baseline indicate?

The resource's configuration does not match the recommended secure settings

The resource must be immediately deleted

The resource is fully compliant with all regulations

The resource is definitely compromised

A company's benchmark assessment reveals that their Azure SQL databases do not have advanced threat protection enabled. The security team needs to remediate this finding. What should they do?

Audit the SQL databases using Azure SQL Auditing.

Enable Microsoft Defender for SQL on all Azure SQL databases.

Set up a firewall rule to restrict access to the SQL databases.

Encrypt the SQL databases using Transparent Data Encryption (TDE).

In a hybrid cloud environment, which security control is essential for ensuring that users from the on-premises identity provider can access cloud resources with consistent identity and access policies?

Security information and event management (SIEM)

A security architect is evaluating a multi-cloud environment with AWS and Azure. They need to apply a consistent set of security benchmarks across both platforms. What is the best approach?

Apply AWS benchmarks to Azure resources to ensure uniformity.

Create a custom benchmark that is identical for both clouds.

Use CIS Benchmarks for each cloud provider and map them to a common control framework.

Use only the Azure Security Benchmark for both clouds.

GIAC Public Cloud Security

Domain 3Objective 1

Cloud Integration and Benchmarking GPCS Practice Questions (Page 1)

Part of the Network and Compliance Security domain, which makes up ~19% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 5–8 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

6concepts

Questions 1–5

1foundation · easy
A security architect is designing connectivity between a company's on-premises data center and a cloud VNet. The requirement is a private, dedicated, high-bandwidth connection that does not traverse the public internet. Which connectivity option should the architect choose?
Select an answer first
2foundation · easy
After running a benchmark assessment on a cloud environment, what does a deviation from the baseline indicate?
Select an answer first
3application · medium
A company's benchmark assessment reveals that their Azure SQL databases do not have advanced threat protection enabled. The security team needs to remediate this finding. What should they do?
Select an answer first
4foundation · easy
In a hybrid cloud environment, which security control is essential for ensuring that users from the on-premises identity provider can access cloud resources with consistent identity and access policies?
Select an answer first
5expert · hard
A security architect is evaluating a multi-cloud environment with AWS and Azure. They need to apply a consistent set of security benchmarks across both platforms. What is the best approach?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GPCS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPCS” is a trademark of its owner, used for identification only.