A company uses a cloud application service platform for multiple business units. The security team wants to ensure that each business unit can only access its own application services and data. The company uses a single cloud subscription. What should the security team implement?

Create a resource group for each business unit and assign RBAC roles that limit access to the respective resource group.

Use a single resource group for all business units and rely on the application service's built-in authentication.

Create a separate cloud account for each business unit and manage access through the account's root user.

Assign all users the Contributor role on the subscription and use tags to identify business units.

A company uses a cloud application service platform that supports multiple environments (development, test, production). The security team wants to ensure that developers have write access to the development environment but only read access to the production environment. What should the security team configure?

Create separate resource groups for each environment and assign developers a Contributor role on the development resource group and a Reader role on the production resource group.

Use the same resource group for development and production and assign developers a Reader role.

Create a single resource group for all environments and assign developers a Contributor role on that resource group.

Assign developers the Owner role on the subscription and rely on the application service's built-in environment isolation.

Which control is used to enforce organizational compliance policies on a cloud application service?

A web application firewall (WAF)

Policy as code (e.g., Azure Policy, AWS Organizations SCPs)

A content delivery network (CDN)

Which cloud service is commonly used to aggregate and analyze logs from multiple application services for security monitoring?

Security information and event management (SIEM) system

A financial services company must ensure that its cloud application service platform meets PCI DSS requirements. The compliance team wants to enforce that all application services use approved TLS versions and that sensitive data is encrypted at rest. What should the company implement?

Manually configure each application service to use TLS 1.2 and enable encryption at rest, and document the settings in a spreadsheet.

Purchase a third-party penetration test and present the report to the compliance team.

Use a cloud application service platform that is certified for PCI DSS and assume all requirements are met.

Apply a cloud policy that requires minimum TLS version and enables encryption at rest for all application services, and use audit logs to verify compliance.

GIAC Public Cloud Security

Domain 2Objective 3

Securing Cloud Application Service Platforms GPCS Practice Questions (Page 4)

Part of the Cloud Platform and Service Security domain, which makes up ~60% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~30–48 in this domain), expect 6–10 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

7concepts

Questions 16–20

16application · medium
A company uses a cloud application service platform for multiple business units. The security team wants to ensure that each business unit can only access its own application services and data. The company uses a single cloud subscription. What should the security team implement?
Select an answer first
17application · medium
A company uses a cloud application service platform that supports multiple environments (development, test, production). The security team wants to ensure that developers have write access to the development environment but only read access to the production environment. What should the security team configure?
Select an answer first
18foundation · easy
Which control is used to enforce organizational compliance policies on a cloud application service?
Select an answer first
19foundation · easy
Which cloud service is commonly used to aggregate and analyze logs from multiple application services for security monitoring?
Select an answer first
20application · medium
A financial services company must ensure that its cloud application service platform meets PCI DSS requirements. The compliance team wants to enforce that all application services use approved TLS versions and that sensitive data is encrypted at rest. What should the company implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GPCS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPCS” is a trademark of its owner, used for identification only.