What is the primary purpose of resource abstraction in virtualization?

To replace the need for a guest operating system in each VM

To encrypt all data stored on the physical host

To present physical hardware resources as logical, flexible pools that can be allocated to multiple VMs

To create a single large VM that uses all host resources

A company migrates a legacy application to an IaaS cloud. The application stores sensitive customer data in a managed database service. According to the shared responsibility model, which security task is the customer's responsibility?

Patching the database server's operating system

Securing the physical data center

Encrypting the customer data at rest in the database

A company is deploying a web application on a cloud IaaS VM. The application stores sensitive data in a database on the same VM. Which combination of controls provides the most comprehensive data protection?

Assign a public IP address to the VM for remote management

Take regular VM snapshots and store them in the same storage account

Encrypt the database files and the VM's virtual disk, and restrict access to the VM via network security groups

A company is migrating a legacy application to a cloud PaaS. The application currently uses a shared admin account for database access. The security team wants to implement a least-privilege model. Which action is the most effective first step?

Move the database to a separate virtual network

Enable multi-factor authentication on the admin account

Create individual service principals with permissions scoped to the application's specific database role

Encrypt the database connection string in the application configuration

GIAC Security Essentials

Domain 6Objective 3

Virtualization, Cloud Security, and AI Essentials GSEC Practice Questions (Page 6)

Part of the Data Protection and Emerging Technologies domain, which makes up ~12% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~11–19 in this domain), expect 4–6 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

10concepts

Questions 26–30

26foundation · easy
What is the primary purpose of resource abstraction in virtualization?
Select an answer first
27foundation · easy
Which security risk is specific to virtualized environments and involves an attacker breaking out of a VM to access the host hypervisor or other VMs?
Select an answer first
28application · medium
A company migrates a legacy application to an IaaS cloud. The application stores sensitive customer data in a managed database service. According to the shared responsibility model, which security task is the customer's responsibility?
Select an answer first
29application · medium
A company is deploying a web application on a cloud IaaS VM. The application stores sensitive data in a database on the same VM. Which combination of controls provides the most comprehensive data protection?
Select an answer first
30application · medium
A company is migrating a legacy application to a cloud PaaS. The application currently uses a shared admin account for database access. The security team wants to implement a least-privilege model. Which action is the most effective first step?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.