Which statement correctly describes a security consideration specific to virtual networks in a public cloud environment?

Virtual networks cannot be connected to on-premises networks for security reasons.

Virtual networks require a physical firewall appliance to enforce any traffic filtering.

Virtual networks provide a software-defined network that can be segmented and controlled using cloud-native security features.

Virtual networks are automatically isolated from all other tenants without any configuration.

A security analyst is investigating a potential breach. They have NSG flow logs in a Log Analytics workspace. They need to find all outbound connections from a specific VM to a known malicious IP address over the past 24 hours. Which query approach should they use?

Query the VM's diagnostic logs for network traffic.

Query the Azure Firewall logs if a firewall is deployed.

Query the NSG flow log table for records where the source IP is the VM's IP and the destination IP is the malicious IP.

Query the AzureActivity table for records related to the VM's network interfaces.

A security analyst is investigating a security incident and needs to determine if a VM communicated with a known malicious IP address. The NSG flow logs are enabled, but the analyst cannot find any logs for the VM. What is the most likely reason?

The VM is using a public IP address and NSG flow logs do not capture traffic to public IPs.

The VM is powered off and NSG flow logs are not generated when the VM is off.

The VM is in a different region than the Log Analytics workspace.

The NSG flow logs are not enabled for the subnet or NIC that the VM is associated with.

GIAC Public Cloud Security

Domain 3Objective 2

Virtual Network Security and Logging GPCS Practice Questions (Page 1)

Part of the Network and Compliance Security domain, which makes up ~19% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 5–8 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

6concepts

Questions 1–5

1foundation · easy
Which statement correctly describes a security consideration specific to virtual networks in a public cloud environment?
Select an answer first
2application · medium
A security team wants to analyze NSG flow logs to identify traffic patterns and detect anomalies. They have enabled NSG flow logs and are sending them to a Log Analytics workspace. Which query language should they use to analyze the logs?
Select an answer first
3application · medium
A security analyst is investigating a potential breach. They have NSG flow logs in a Log Analytics workspace. They need to find all outbound connections from a specific VM to a known malicious IP address over the past 24 hours. Which query approach should they use?
Select an answer first
4expert · hard
A security analyst is investigating a security incident and needs to determine if a VM communicated with a known malicious IP address. The NSG flow logs are enabled, but the analyst cannot find any logs for the VM. What is the most likely reason?
Select an answer first
5foundation · easy
In a cloud virtual network, which component provides the logical isolation boundary that defines the IP address space and acts as the foundation for subnets and network security controls?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GPCS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPCS” is a trademark of its owner, used for identification only.

Virtual Network Security and Logging GPCS Practice Questions (Page 1)

Questions 1–5

Which statement correctly describes a security consideration specific to virtual networks in a public cloud environment?

A security team wants to analyze NSG flow logs to identify traffic patterns and detect anomalies. They have enabled NSG flow logs and are sending them to a Log Analytics workspace. Which query language should they use to analyze the logs?

A security analyst is investigating a potential breach. They have NSG flow logs in a Log Analytics workspace. They need to find all outbound connections from a specific VM to a known malicious IP address over the past 24 hours. Which query approach should they use?

A security analyst is investigating a security incident and needs to determine if a VM communicated with a known malicious IP address. The NSG flow logs are enabled, but the analyst cannot find any logs for the VM. What is the most likely reason?

In a cloud virtual network, which component provides the logical isolation boundary that defines the IP address space and acts as the foundation for subnets and network security controls?

Keep studying — Network and Compliance Security