What is the primary purpose of encrypting data in transit in a cloud environment?

To ensure data is deleted after use

To protect data from interception while it travels between the client and the cloud

A security team is hardening a virtualized environment. They have identified that VM snapshots are stored on a shared storage array accessible to all administrators. They also found that some VMs have unnecessary virtual hardware devices attached. Which combination of actions best reduces the risk of snapshot data exposure and VM escape?

Move snapshots to a local disk and disable hypervisor patching

Delete all snapshots and use a single virtual switch

Encrypt the snapshots and enable memory overcommitment

Restrict access to the snapshot storage and remove unused virtual devices

Which security application commonly uses machine learning to detect anomalies in network traffic?

Data loss prevention (DLP) policies

Intrusion detection systems (IDS)

A company runs a legacy application on a physical server that must remain available during a migration. The administrator plans to convert the physical server to a virtual machine on a Type 1 hypervisor. Which security consideration is most important to address before the conversion?

Confirm the physical server has enough RAM to run the hypervisor

Verify that the VM has a static MAC address assigned

Install antivirus software inside the VM after conversion

Ensure the hypervisor is patched and hardened before hosting the converted VM

What is an adversarial attack in the context of AI security?

Overloading the AI server with network traffic

Crafting inputs that cause an AI model to make incorrect predictions

Stealing the training data through SQL injection

Deleting the model's backup files

GIAC Security Essentials

Domain 6Objective 3

Virtualization, Cloud Security, and AI Essentials GSEC Practice Questions (Page 3)

Part of the Data Protection and Emerging Technologies domain, which makes up ~12% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~11–19 in this domain), expect 4–6 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

10concepts

Questions 11–15

11foundation · easy
What is the primary purpose of encrypting data in transit in a cloud environment?
Select an answer first
12expert · hard
A security team is hardening a virtualized environment. They have identified that VM snapshots are stored on a shared storage array accessible to all administrators. They also found that some VMs have unnecessary virtual hardware devices attached. Which combination of actions best reduces the risk of snapshot data exposure and VM escape?
Select an answer first
13foundation · easy
Which security application commonly uses machine learning to detect anomalies in network traffic?
Select an answer first
14application · medium
A company runs a legacy application on a physical server that must remain available during a migration. The administrator plans to convert the physical server to a virtual machine on a Type 1 hypervisor. Which security consideration is most important to address before the conversion?
Select an answer first
15foundation · easy
What is an adversarial attack in the context of AI security?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.