Why is it important to enable audit logging for a cloud application service?

To reduce the application's storage costs

To provide a record of activities for security investigations and compliance

To automatically block all malicious traffic

To improve the application's user interface

What is the primary purpose of a governance framework for cloud application services?

To provide a user interface for managing applications

To define policies and procedures that ensure services meet regulatory and organizational requirements

To automatically scale applications based on demand

Which statement accurately describes the shared responsibility model for a cloud application service platform (e.g., AWS Elastic Beanstalk, Azure App Service, Google App Engine)?

The provider secures the platform runtime and the customer secures the application and its configuration.

The customer is responsible for securing the physical hosts and network infrastructure.

The provider is responsible for the security of the application code and customer data.

The customer is responsible for patching the platform's underlying operating system.

Which network security control is used to restrict inbound traffic to a cloud application service based on source IP address and port?

Data loss prevention (DLP) policy

Identity provider (IdP) configuration

Network security group (NSG) or security group

A startup is deploying a new application service on a cloud platform. The team wants to understand which security controls are the responsibility of the cloud provider and which are the responsibility of the startup. The application will store customer data and will be accessed over the internet. Which security control is the startup responsible for?

Managing the application service's authentication and authorization logic.

Patching the underlying operating system of the application service platform.

Securing the physical data center that hosts the application service.

Configuring the hypervisor that isolates the application service from other tenants.

GIAC Public Cloud Security

Domain 2Objective 3

Securing Cloud Application Service Platforms GPCS Practice Questions (Page 7)

Part of the Cloud Platform and Service Security domain, which makes up ~60% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~30–48 in this domain), expect 6–10 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

7concepts

Questions 31–35

31foundation · easy
Why is it important to enable audit logging for a cloud application service?
Select an answer first
32foundation · easy
What is the primary purpose of a governance framework for cloud application services?
Select an answer first
33foundation · easy
Which statement accurately describes the shared responsibility model for a cloud application service platform (e.g., AWS Elastic Beanstalk, Azure App Service, Google App Engine)?
Select an answer first
34foundation · easy
Which network security control is used to restrict inbound traffic to a cloud application service based on source IP address and port?
Select an answer first
35application · medium
A startup is deploying a new application service on a cloud platform. The team wants to understand which security controls are the responsibility of the cloud provider and which are the responsibility of the startup. The application will store customer data and will be accessed over the internet. Which security control is the startup responsible for?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GPCS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPCS” is a trademark of its owner, used for identification only.