A security architect is designing a virtualized environment for a multi-tenant application. The architect must balance strong isolation between tenants with the operational need to share physical resources for cost efficiency. Which approach best satisfies both requirements?

Deploy each tenant on a separate physical server

Use separate virtual networks with firewall rules and apply hypervisor-level resource controls to limit each tenant's consumption

Place all tenants on a single virtual network with no firewall rules

Use a single hypervisor with no resource limits

A company wants to use a cloud-based email and collaboration suite without managing any infrastructure. They need the provider to handle security patches, uptime, and data backups. Which service model is the best fit?

Infrastructure as a Service (IaaS)

A company uses a cloud provider's IaaS offering to host a database server. The database contains customer data. Which security responsibility remains with the company?

Securing the physical data center that hosts the VM

Replacing failed hardware in the server rack

Managing the hypervisor that runs the VM

Patching the database software and the operating system of the VM

GIAC Security Essentials

Domain 6Objective 3

Virtualization, Cloud Security, and AI Essentials GSEC Practice Questions (Page 2)

Part of the Data Protection and Emerging Technologies domain, which makes up ~12% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~11–19 in this domain), expect 4–6 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

10concepts

Questions 6–10

6application · medium
A financial firm wants to keep sensitive customer data on-premises for compliance but use cloud-based analytics tools that process only anonymized data. Which deployment model best matches this requirement?
Select an answer first
7application · medium
An attacker repeatedly queries a machine learning model with carefully crafted inputs to infer the decision boundary and eventually create a copy of the model's functionality. This is an example of which threat?
Select an answer first
8expert · medium
A security architect is designing a virtualized environment for a multi-tenant application. The architect must balance strong isolation between tenants with the operational need to share physical resources for cost efficiency. Which approach best satisfies both requirements?
Select an answer first
9application · medium
A company wants to use a cloud-based email and collaboration suite without managing any infrastructure. They need the provider to handle security patches, uptime, and data backups. Which service model is the best fit?
Select an answer first
10application · medium
A company uses a cloud provider's IaaS offering to host a database server. The database contains customer data. Which security responsibility remains with the company?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Virtualization, Cloud Security, and AI Essentials GSEC Practice Questions (Page 2)

Questions 6–10

A financial firm wants to keep sensitive customer data on-premises for compliance but use cloud-based analytics tools that process only anonymized data. Which deployment model best matches this requirement?

An attacker repeatedly queries a machine learning model with carefully crafted inputs to infer the decision boundary and eventually create a copy of the model's functionality. This is an example of which threat?

A security architect is designing a virtualized environment for a multi-tenant application. The architect must balance strong isolation between tenants with the operational need to share physical resources for cost efficiency. Which approach best satisfies both requirements?

A company wants to use a cloud-based email and collaboration suite without managing any infrastructure. They need the provider to handle security patches, uptime, and data backups. Which service model is the best fit?

A company uses a cloud provider's IaaS offering to host a database server. The database contains customer data. Which security responsibility remains with the company?

Keep studying — Data Protection and Emerging Technologies