A developer is writing a script that calls a cloud provider's REST API to list virtual machines. The script will run on a laptop over public Wi-Fi. Which practice is essential to protect the API request and response?

Use a custom header with the password instead of TLS.

Use HTTP and rely on the cloud provider's IP allowlist.

Embed the API key in the script and use HTTP for simplicity.

Use HTTPS for all API calls and verify the server's TLS certificate.

A company uses an external identity provider (IdP) for single sign-on (SSO) to its cloud console. The security team wants to ensure that when an employee leaves, their cloud access is revoked quickly. What is the best approach?

Change the user's cloud password and notify the cloud provider.

Disable the user's account in the IdP, which will propagate to the cloud via federation.

Delete the user's cloud account and recreate it when needed.

Wait for the user's session to expire naturally.

A cloud administrator needs to perform a one-time configuration change on a virtual machine and then immediately verify the result. Which access method is most appropriate for this task?

Infrastructure-as-code templates

When accessing a cloud service through a web browser, what does the padlock icon in the address bar typically indicate?

The website has been scanned for malware and is safe

The website is free from phishing attempts

The website is authenticated with a valid TLS/SSL certificate and the connection is encrypted

The website is using a virtual private network (VPN)

GIAC Public Cloud Security

Domain 1Objective 2

Securely Accessing Cloud Services GPCS Practice Questions (Page 5)

Part of the Cloud Security Fundamentals domain, which makes up ~21% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~11–17 in this domain), expect 6–9 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

6concepts

Questions 21–25

21application · medium
A developer is writing a script that calls a cloud provider's REST API to list virtual machines. The script will run on a laptop over public Wi-Fi. Which practice is essential to protect the API request and response?
Select an answer first
22foundation · easy
A development team wants to automate the creation of cloud resources every time code is merged into the main branch. Which cloud access method is best suited for this automation?
Select an answer first
23application · medium
A company uses an external identity provider (IdP) for single sign-on (SSO) to its cloud console. The security team wants to ensure that when an employee leaves, their cloud access is revoked quickly. What is the best approach?
Select an answer first
24foundation · easy
A cloud administrator needs to perform a one-time configuration change on a virtual machine and then immediately verify the result. Which access method is most appropriate for this task?
Select an answer first
25foundation · easy
When accessing a cloud service through a web browser, what does the padlock icon in the address bar typically indicate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GPCS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPCS” is a trademark of its owner, used for identification only.