A cloud security team is configuring a new AWS account for a project that will store sensitive financial data. They want to enforce least privilege for all users and ensure that all actions are logged. Which combination of controls should they implement?

Enable VPC Flow Logs and assign the AdministratorAccess policy to all users

Enable AWS CloudTrail and use IAM roles with scoped policies

Enable AWS Shield and use access keys for every user

Enable AWS Config and use the root account for all administrative tasks

A security team is evaluating an AI-based intrusion detection system (IDS). The vendor claims the system uses deep learning to detect zero-day attacks. The team is concerned about the system being evaded by adversarial examples. Which combination of defenses is most effective?

Encrypting the model and using a proprietary algorithm

Adversarial training and input sanitization

Increasing the model's complexity and depth

Restricting access to the IDS dashboard

GIAC Security Essentials

Domain 6Objective 3

Virtualization, Cloud Security, and AI Essentials GSEC Practice Questions (Page 7)

Part of the Data Protection and Emerging Technologies domain, which makes up ~12% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~11–19 in this domain), expect 4–6 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

10concepts

Questions 31–35

31foundation · easy
Which security control is specifically used to prevent a compromised VM from affecting other VMs on the same host?
Select an answer first
32foundation · easy
Which defensive technique involves training an AI model with adversarial examples to make it more resilient to attacks?
Select an answer first
33application · medium
A cloud security team is configuring a new AWS account for a project that will store sensitive financial data. They want to enforce least privilege for all users and ensure that all actions are logged. Which combination of controls should they implement?
Select an answer first
34foundation · easy
Which cloud security best practice is most directly related to ensuring that users have only the permissions necessary to perform their job functions?
Select an answer first
35expert · medium
A security team is evaluating an AI-based intrusion detection system (IDS). The vendor claims the system uses deep learning to detect zero-day attacks. The team is concerned about the system being evaded by adversarial examples. Which combination of defenses is most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Virtualization, Cloud Security, and AI Essentials GSEC Practice Questions (Page 7)

Questions 31–35

Which security control is specifically used to prevent a compromised VM from affecting other VMs on the same host?

Which defensive technique involves training an AI model with adversarial examples to make it more resilient to attacks?

A cloud security team is configuring a new AWS account for a project that will store sensitive financial data. They want to enforce least privilege for all users and ensure that all actions are logged. Which combination of controls should they implement?

Which cloud security best practice is most directly related to ensuring that users have only the permissions necessary to perform their job functions?

A security team is evaluating an AI-based intrusion detection system (IDS). The vendor claims the system uses deep learning to detect zero-day attacks. The team is concerned about the system being evaded by adversarial examples. Which combination of defenses is most effective?

Keep studying — Data Protection and Emerging Technologies