A company is required to retain NSG flow logs for 90 days for compliance. They are currently sending logs to a Log Analytics workspace with a retention period of 30 days. They also want to minimize costs. Which approach should they take?

Keep the Log Analytics workspace at 30 days and rely on Azure Monitor alerts to capture critical events.

Export logs to a storage account with a lifecycle management policy to delete after 90 days.

Increase the Log Analytics workspace retention period to 90 days.

Use Azure Data Explorer to store logs for 90 days.

A company is deploying a multi-tier application in a cloud VNet. The web tier must accept HTTPS from the internet, the app tier must only accept traffic from the web tier, and the database tier must only accept traffic from the app tier. All tiers are in separate subnets. The security team wants to enforce this with network security groups (NSGs) and also needs to audit rejected connection attempts. What is the most efficient way to meet these requirements?

Apply a single NSG to the web subnet allowing HTTPS from the internet, and rely on default deny rules to block the other tiers.

Configure NSGs on each subnet with the required rules, and enable network performance monitor to capture traffic analytics.

Apply an NSG to each subnet with rules allowing only the required source-to-destination pairs, and enable NSG flow logs for the VNet.

Use Azure Firewall to filter traffic between subnets and enable diagnostic settings on the firewall to log all traffic.

GIAC Public Cloud Security

Domain 3Objective 2

Virtual Network Security and Logging GPCS Practice Questions (Page 7)

Part of the Network and Compliance Security domain, which makes up ~19% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 5–8 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

6concepts

Questions 31–33

31expert · hard
A company is required to retain NSG flow logs for 90 days for compliance. They are currently sending logs to a Log Analytics workspace with a retention period of 30 days. They also want to minimize costs. Which approach should they take?
Select an answer first
32foundation · easy
Which cloud networking component is used to filter traffic between subnets or between a subnet and the internet based on rules that include source/destination IP, port, and protocol?
Select an answer first
33application · medium
A company is deploying a multi-tier application in a cloud VNet. The web tier must accept HTTPS from the internet, the app tier must only accept traffic from the web tier, and the database tier must only accept traffic from the app tier. All tiers are in separate subnets. The security team wants to enforce this with network security groups (NSGs) and also needs to audit rejected connection attempts. What is the most efficient way to meet these requirements?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GPCS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPCS” is a trademark of its owner, used for identification only.

Virtual Network Security and Logging GPCS Practice Questions (Page 7)

Questions 31–33

A company is required to retain NSG flow logs for 90 days for compliance. They are currently sending logs to a Log Analytics workspace with a retention period of 30 days. They also want to minimize costs. Which approach should they take?

Which cloud networking component is used to filter traffic between subnets or between a subnet and the internet based on rules that include source/destination IP, port, and protocol?

Keep studying — Network and Compliance Security