A multinational company is moving its customer database to a cloud provider. The database contains personal data of customers from multiple countries, including countries with strict data residency laws. The company must ensure compliance with all applicable laws. What should the company do?

Use the provider's multi-region replication to ensure data availability

Segment data by residency requirements and store each segment in an approved region

Encrypt all data and rely on the provider's compliance certifications

Store all data in a single region that has the most permissive data laws

A company is using a cloud container orchestration platform to run microservices. The security team has identified that some containers are running with root privileges and that the container images are not scanned for vulnerabilities. The team wants to improve the security posture without disrupting the application. What should the team do first?

Implement a container image scanning policy and enforce non-root execution in the orchestration configuration

Immediately stop all containers and redeploy with non-root users

Grant all containers the same service account to simplify access management

Disable the orchestration platform's security features to improve performance

Which contract clause is most important for a cloud customer to include to ensure they can retrieve their data if they terminate the service?

Service level agreement (SLA) for uptime

Data portability and return-of-data provisions

A startup is building a new application and wants to minimize the time spent on infrastructure management. The team wants to focus on writing code and does not want to manage servers or operating systems. Which cloud service model is most appropriate?

Infrastructure as a Service (IaaS)

A company is deploying a multi-tier web application in a cloud VPC. The web servers must be reachable from the internet, but the database servers must only be accessible from the web servers. The security architect needs to design network segmentation. Which approach should the architect implement?

Use a single subnet and configure the database to listen only on localhost

Place web and database servers in the same subnet and rely on host-based firewalls

Place the database in a public subnet and restrict access with a network ACL

Create separate subnets for web and database tiers, with a security group allowing database traffic only from the web subnet

GIAC Security Leadership

Domain 2Objective 3

Managing Cloud Security GSLC Practice Questions (Page 9)

Part of the Technical Security Management domain, which makes up ~27% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~19–32 in this domain), expect 4–6 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

7concepts

Questions 41–45

41application · medium
A multinational company is moving its customer database to a cloud provider. The database contains personal data of customers from multiple countries, including countries with strict data residency laws. The company must ensure compliance with all applicable laws. What should the company do?
Select an answer first
42expert · hard
A company is using a cloud container orchestration platform to run microservices. The security team has identified that some containers are running with root privileges and that the container images are not scanned for vulnerabilities. The team wants to improve the security posture without disrupting the application. What should the team do first?
Select an answer first
43foundation · easy
Which contract clause is most important for a cloud customer to include to ensure they can retrieve their data if they terminate the service?
Select an answer first
44application · easy
A startup is building a new application and wants to minimize the time spent on infrastructure management. The team wants to focus on writing code and does not want to manage servers or operating systems. Which cloud service model is most appropriate?
Select an answer first
45application · medium
A company is deploying a multi-tier web application in a cloud VPC. The web servers must be reachable from the internet, but the database servers must only be accessible from the web servers. The security architect needs to design network segmentation. Which approach should the architect implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSLC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSLC” is a trademark of its owner, used for identification only.