A company uses a multi-cloud environment with workloads in AWS and Azure. They want to allow a third-party SaaS application to access resources in both clouds using a single set of credentials. Which approach should they use?

Use a federated identity solution that supports SAML 2.0 to establish trust between the SaaS provider and the corporate identity provider.

Use the SaaS provider's built-in user database and create separate users for each cloud.

Create separate service accounts in each cloud and share the credentials with the SaaS provider.

Configure a VPN between the SaaS provider and both clouds to allow direct access.

A global company must connect its on-premises data center to a cloud region in a specific country to meet data residency requirements. The data is sensitive and requires low latency. They are evaluating a site-to-site VPN and a dedicated connection. What is the most important factor in choosing between them?

The choice depends only on cost, as both provide the same security and compliance.

The VPN is more secure because it uses encryption, while dedicated connections are not encrypted.

The dedicated connection provides a private, consistent network path that avoids internet variability, which is critical for low-latency and compliance.

The VPN is always sufficient because it encrypts traffic and meets data residency requirements.

A company is connecting its on-premises data center to Azure using ExpressRoute. They also have a site-to-site VPN as a backup. The security team wants to ensure that all traffic between the two environments is encrypted, even over the ExpressRoute connection. What should they do?

Enable IPsec encryption over the ExpressRoute connection.

Use Azure Private Link to connect to Azure services.

Use the site-to-site VPN as the primary connection and ExpressRoute as backup.

Implement network security groups (NSGs) on the Azure subnets.

An organization uses single sign-on (SSO) to integrate its on-premises Active Directory with a cloud SaaS application. Which security control is most important to protect this integration point?

Allow all authentication requests from any IP address.

Implement multi-factor authentication (MFA) for all users accessing the SaaS application.

Disable logging on the federation service to reduce overhead.

Use a long-lived shared secret for the federation trust.

What is the primary goal of a remediation plan after a benchmark assessment?

To improve the cloud security posture by addressing identified deviations

To document the assessment process

GIAC Public Cloud Security

Domain 3Objective 1

Cloud Integration and Benchmarking GPCS Practice Questions (Page 5)

Part of the Network and Compliance Security domain, which makes up ~19% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 5–8 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

6concepts

Questions 21–25

21application · medium
A company uses a multi-cloud environment with workloads in AWS and Azure. They want to allow a third-party SaaS application to access resources in both clouds using a single set of credentials. Which approach should they use?
Select an answer first
22expert · hard
A global company must connect its on-premises data center to a cloud region in a specific country to meet data residency requirements. The data is sensitive and requires low latency. They are evaluating a site-to-site VPN and a dedicated connection. What is the most important factor in choosing between them?
Select an answer first
23expert · hard
A company is connecting its on-premises data center to Azure using ExpressRoute. They also have a site-to-site VPN as a backup. The security team wants to ensure that all traffic between the two environments is encrypted, even over the ExpressRoute connection. What should they do?
Select an answer first
24application · medium
An organization uses single sign-on (SSO) to integrate its on-premises Active Directory with a cloud SaaS application. Which security control is most important to protect this integration point?
Select an answer first
25foundation · easy
What is the primary goal of a remediation plan after a benchmark assessment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GPCS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPCS” is a trademark of its owner, used for identification only.