An organization uses AWS and Azure. A developer leaves the company. The security team needs to ensure that all credentials associated with the developer are revoked. Which action is MOST important to perform?

Delete the developer's IAM users in AWS and Azure AD users in Azure.

Disable the developer's user account in the corporate identity provider (IdP) that federates access to both clouds.

Remove the developer's permissions from all cloud resource policies.

Rotate all access keys that the developer may have had access to.

How does credential management support compliance in a multicloud environment?

By ensuring all credentials are stored in plain text for easy auditing

By using the same credential for all providers to simplify compliance

By providing audit trails and enforcing access controls on credentials

By eliminating the need for external audits

A security engineer is designing a credential management strategy for a multicloud environment. The company requires that no human ever sees a production secret and that all secret access is logged. Which combination of practices best achieves this?

Use a secrets manager with dynamic secrets and audit logging, and configure applications to retrieve secrets at runtime.

Use long-lived service accounts and rotate them annually with a manual process.

Store production secrets in a shared spreadsheet and restrict access to the security team.

Embed secrets in the application code and use code review to ensure they are not exposed.

A company is implementing a credential lifecycle policy for a multicloud environment. The policy requires that credentials be rotated immediately when an employee with access leaves the company. The company uses a shared vault for all cloud credentials. Which control is most important to ensure that rotation happens promptly?

Automate the rotation process and integrate it with the HR offboarding workflow.

Require the departing employee's manager to manually request rotation within 24 hours.

Schedule a weekly rotation of all credentials in the vault.

Disable the departing employee's user account and rely on the cloud provider to automatically rotate the credentials.

Which method is recommended for securely storing credentials that are used across multiple cloud providers?

Store them in a shared spreadsheet with restricted access

Email them to administrators for safekeeping

Hardcode them in environment variables in each provider

Use a centralized secrets management service with encryption

GIAC Public Cloud Security

Domain 1Objective 1

Multicloud and Credential Management Fundamentals GPCS Practice Questions (Page 6)

Part of the Cloud Security Fundamentals domain, which makes up ~21% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~11–17 in this domain), expect 6–9 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

5concepts

Questions 26–30

26application · medium
An organization uses AWS and Azure. A developer leaves the company. The security team needs to ensure that all credentials associated with the developer are revoked. Which action is MOST important to perform?
Select an answer first
27foundation · easy
How does credential management support compliance in a multicloud environment?
Select an answer first
28application · medium
A security engineer is designing a credential management strategy for a multicloud environment. The company requires that no human ever sees a production secret and that all secret access is logged. Which combination of practices best achieves this?
Select an answer first
29expert · hard
A company is implementing a credential lifecycle policy for a multicloud environment. The policy requires that credentials be rotated immediately when an employee with access leaves the company. The company uses a shared vault for all cloud credentials. Which control is most important to ensure that rotation happens promptly?
Select an answer first
30foundation · easy
Which method is recommended for securely storing credentials that are used across multiple cloud providers?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GPCS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPCS” is a trademark of its owner, used for identification only.