A company has a policy that requires all cloud access keys to be rotated every 30 days. The security team wants to automate the rotation process to reduce the risk of human error. The team also wants to ensure that applications using the keys experience no downtime. Which approach should the team implement?

Use a secrets management service that automatically rotates keys and updates applications.

Create a script that rotates keys manually and runs it every 30 days.

Disable key rotation and use long-lived keys.

Use a single access key and change it every 30 days without updating applications.

A company is migrating to a cloud environment and wants to use its existing Active Directory for authentication. The security team requires MFA for all cloud administrative access. They also want to avoid storing cloud passwords in the cloud. Which solution best meets these requirements?

Create separate cloud accounts with strong passwords and enable MFA on each.

Use a VPN to the cloud and rely on AD credentials over the VPN.

Use the cloud provider's built-in identity store and sync passwords from AD.

Set up federation between Active Directory and the cloud IdP, and enforce MFA at the cloud IdP.

A cloud architect is designing IAM for a multi-account environment. The company wants to centralize user management in one account and allow users to assume roles in other accounts. Which approach is most secure and scalable?

Use a single account for all resources to simplify IAM.

Share the same access key across all accounts.

Use identity federation with role assumption across accounts.

Create duplicate users in every account with the same permissions.

An organization has three teams: Developers, Security, and Finance. Developers need to deploy to a staging environment but must not modify production. Security needs read-only access to all logs. Finance needs read-only access to billing. Which approach implements least privilege?

Create a role for each job function and assign users to the appropriate role.

Grant all users the same broad role to simplify management.

Use the cloud provider's built-in administrator role for all users.

Assign each user individual permissions based on their current tasks.

A developer is troubleshooting why a script that calls a cloud API is failing with a certificate error. The script runs on a server with an outdated operating system. The developer verifies that the cloud service is healthy and reachable. What is the most likely cause of the certificate error?

The cloud service's certificate has been revoked by the certificate authority.

The cloud service has intentionally disabled TLS for the API endpoint.

The script is using the wrong API endpoint URL.

The server's trust store does not include the root certificate used by the cloud service's TLS certificate.

GIAC Public Cloud Security

Domain 1Objective 2

Securely Accessing Cloud Services GPCS Practice Questions (Page 1)

Part of the Cloud Security Fundamentals domain, which makes up ~21% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~11–17 in this domain), expect 6–9 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

6concepts

Questions 1–5

1expert · hard
A company has a policy that requires all cloud access keys to be rotated every 30 days. The security team wants to automate the rotation process to reduce the risk of human error. The team also wants to ensure that applications using the keys experience no downtime. Which approach should the team implement?
Select an answer first
2expert · hard
A company is migrating to a cloud environment and wants to use its existing Active Directory for authentication. The security team requires MFA for all cloud administrative access. They also want to avoid storing cloud passwords in the cloud. Which solution best meets these requirements?
Select an answer first
3expert · hard
A cloud architect is designing IAM for a multi-account environment. The company wants to centralize user management in one account and allow users to assume roles in other accounts. Which approach is most secure and scalable?
Select an answer first
4application · medium
An organization has three teams: Developers, Security, and Finance. Developers need to deploy to a staging environment but must not modify production. Security needs read-only access to all logs. Finance needs read-only access to billing. Which approach implements least privilege?
Select an answer first
5application · medium
A developer is troubleshooting why a script that calls a cloud API is failing with a certificate error. The script runs on a server with an outdated operating system. The developer verifies that the cloud service is healthy and reachable. What is the most likely cause of the certificate error?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GPCS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPCS” is a trademark of its owner, used for identification only.