A company is migrating a legacy application to the cloud. The application has strict compliance requirements that mandate the company retain control over the operating system and middleware. The company also wants to minimize operational overhead. Which service model best meets these competing constraints?

Infrastructure as a Service (IaaS)

A financial institution uses a machine learning model to detect fraudulent transactions. An attacker has gained access to the model's prediction API and is querying it with carefully crafted inputs to learn the model's decision boundaries. What is the primary risk, and which defense is most effective?

Prompt injection; implement output filtering

Model theft; implement rate limiting and monitor API queries for unusual patterns

Data poisoning; implement input validation

Adversarial examples; implement adversarial training

Why are insecure snapshots considered a security risk in virtualized environments?

They increase CPU usage of the host

They automatically replicate data to other clouds

They may contain sensitive data and can be restored to bypass security controls

They are always encrypted and therefore safe

GIAC Security Essentials

Domain 6Objective 3

Virtualization, Cloud Security, and AI Essentials GSEC Practice Questions (Page 1)

Part of the Data Protection and Emerging Technologies domain, which makes up ~12% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~11–19 in this domain), expect 4–6 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

10concepts

Questions 1–5

1foundation · easy
Which term describes a subset of machine learning that uses multi-layered neural networks to model complex patterns?
Select an answer first
2expert · medium
A company is migrating a legacy application to the cloud. The application has strict compliance requirements that mandate the company retain control over the operating system and middleware. The company also wants to minimize operational overhead. Which service model best meets these competing constraints?
Select an answer first
3application · medium
A government agency must share a cloud platform with several other agencies that have similar security requirements. They want to reduce costs by sharing infrastructure but need to ensure that data is isolated between agencies. Which deployment model is most appropriate?
Select an answer first
4expert · hard
A financial institution uses a machine learning model to detect fraudulent transactions. An attacker has gained access to the model's prediction API and is querying it with carefully crafted inputs to learn the model's decision boundaries. What is the primary risk, and which defense is most effective?
Select an answer first
5foundation · easy
Why are insecure snapshots considered a security risk in virtualized environments?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Virtualization, Cloud Security, and AI Essentials GSEC Practice Questions (Page 1)

Questions 1–5

Which term describes a subset of machine learning that uses multi-layered neural networks to model complex patterns?

A government agency must share a cloud platform with several other agencies that have similar security requirements. They want to reduce costs by sharing infrastructure but need to ensure that data is isolated between agencies. Which deployment model is most appropriate?

Why are insecure snapshots considered a security risk in virtualized environments?

Keep studying — Data Protection and Emerging Technologies