A multinational company must comply with data residency laws that require customer data to remain within a specific country. The company also wants to use a cloud provider's AI services that are only available in a different region. Which approach best balances compliance and functionality?

Use a hybrid cloud with data stored in the compliant region and AI services processing only anonymized data in the other region

Store all data on-premises and do not use AI services

Store all data in the AI service's region to use the services

Use a private cloud in the compliant region and replicate data to the AI region

A virtualized environment hosts VMs from different business units with different trust levels. The administrator wants to prevent a compromised VM from communicating with VMs in other trust zones. Which control is the most direct?

Place VMs in separate virtual networks with firewall rules between them

Enable hypervisor memory overcommitment

Use a single virtual switch for all VMs to simplify management

Assign static IP addresses to all VMs

What is a key hardening practice for a hypervisor?

Disabling unnecessary services and management interfaces

Enabling all default features for maximum functionality

Using the same password for all hypervisor accounts

Allowing direct internet access to the management console

A virtualized data center hosts both production and development VMs. The administrator wants to prevent a compromised development VM from affecting production VMs, but also wants to maintain the ability to share resources for cost efficiency. Which approach is the most balanced?

Place development and production VMs in separate clusters with different resource pools and network segments

Enable VM snapshots for all VMs

Use separate physical servers for each VM

Run all VMs on the same cluster with no network segmentation

GIAC Security Essentials

Domain 6Objective 3

Virtualization, Cloud Security, and AI Essentials GSEC Practice Questions (Page 8)

Part of the Data Protection and Emerging Technologies domain, which makes up ~12% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~11–19 in this domain), expect 4–6 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

10concepts

Questions 36–40

36expert · medium
A multinational company must comply with data residency laws that require customer data to remain within a specific country. The company also wants to use a cloud provider's AI services that are only available in a different region. Which approach best balances compliance and functionality?
Select an answer first
37application · medium
A virtualized environment hosts VMs from different business units with different trust levels. The administrator wants to prevent a compromised VM from communicating with VMs in other trust zones. Which control is the most direct?
Select an answer first
38foundation · easy
What is a key hardening practice for a hypervisor?
Select an answer first
39application · medium
An attacker subtly modifies the training data of a company's spam filter so that emails containing a specific phrase are classified as legitimate. This is an example of which type of AI threat?
Select an answer first
40expert · medium
A virtualized data center hosts both production and development VMs. The administrator wants to prevent a compromised development VM from affecting production VMs, but also wants to maintain the ability to share resources for cost efficiency. Which approach is the most balanced?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.