Multicloud and Credential Management Fundamentals GPCS Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A company is evaluating a multicloud strategy to improve resilience. The security team notes that managing credentials across multiple clouds increases complexity. Which approach best mitigates the credential management complexity while preserving the resilience benefit?

   • AStandardize on a single cloud to eliminate credential management complexity.
   • BUse a single identity provider and a centralized secrets manager that integrates with all clouds.
   • CUse the same credentials for both clouds to simplify management.
   • DUse separate identity providers and secrets managers for each cloud to maintain isolation.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which stage of the credential lifecycle involves defining who or what can use a credential and for what purpose?

   • AAuthorization
   • BProvisioning
   • CRevocation
   • DRotation
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   What is a fundamental best practice for managing credentials in cloud environments?

   • AShare credentials among team members to ensure availability
   • BEmbed credentials directly in application code for easy access
   • CUse the same credential across all cloud providers to simplify management
   • DRotate credentials regularly and limit their scope
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A company uses AWS and Google Cloud. The security team wants to implement the principle of least privilege for service accounts. Which practice is most effective?

   • ACreate separate service accounts for each workload, grant only the permissions required, and review them periodically.
   • BCreate a single service account per cloud with broad permissions and use it for all workloads.
   • CGrant service accounts permissions based on the user's role rather than the workload's requirements.
   • DUse the same service account in both clouds by exporting the key from one cloud and importing it into the other.
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A company is implementing a credential lifecycle policy. The policy requires that credentials be automatically rotated every 30 days and that old credentials be immediately invalidated. Which control is most important to ensure that old credentials are invalidated after rotation?

   • AKeep the previous version in the secrets manager for rollback purposes.
   • BRely on the cloud provider to automatically invalidate old credentials after rotation.
   • CNotify administrators via email to manually delete the old credentials.
   • DConfigure the secrets manager to delete or disable the previous version of the credential after rotation.
   Reveal Solution Discussion Select an answer first