GCLD Exam Training Practice Tests (GIAC Cloud Security Essentials)]

Question 1

When configuring cloud resources to store sensitive data, which of the following practices should be avoided?
Response:

A. Implementation of strict data access controls B. Regular auditing of access logs C. Storage of unencrypted sensitive data D. Frequent testing of security measures

Correct Answer: C

Question 2

What role does continuous monitoring play in the effectiveness of a security framework?
Response:

A. It is irrelevant as long as initial security measures are strong B. It is only necessary for systems that handle sensitive information C. It replaces the need for initial risk assessments and security control implementations D. It ensures that security controls remain effective and can respond to evolving threats

Correct Answer: D

Question 3

In secrets management, what is the benefit of using a dedicated hardware security module (HSM)?
Response:

A. To decrease the level of physical security for stored secrets. B. To provide strong isolation and protection for cryptographic keys. C. To avoid compliance with industry security standards. D. To encourage the sharing of cryptographic keys over the network.

Correct Answer: B

Question 4

Cloud Access Management principles often emphasize the importance of monitoring. Which of the following activities is crucial for maintaining access security?
Response:

A. Monitoring and logging all cloud service provider price changes. B. Monitoring network traffic unrelated to cloud resources. C. Regularly reviewing access logs and permissions. D. Conducting regular performance reviews of cloud resources.

Correct Answer: C

Question 5

How can organizations effectively detect and protect sensitive data in the cloud?
(Choose three)
Response:

A. Ignoring compliance requirements and data protection standards B. Restricting data access to all users C. Using encryption and tokenization for data at rest and in transit D. Implementing automated data classification and discovery tools

Correct Answer: A,C,D

Question 6

Which of the following is an IAM best practice for securing cloud environments?
Response:

A. Disabling user activity logging B. Granting least privilege access C. Enabling root access for all users D. Using shared user accounts

Correct Answer: B

Question 7

In a cloud service model, who is responsible for securing the operating system in an IaaS deployment?
Response:

A. Third-party vendors B. The cloud provider C. The customer D. Both the provider and the customer

Correct Answer: C

Question 8

Which two practices improve cloud network security monitoring?
(Choose Two)
Response:

A. Ignoring encryption alerts B. Continuous packet capture C. Reducing log retention D. Real-time threat detection

Correct Answer: B,D

Question 9

Which tool is commonly used for automating cloud infrastructure?
Response:

A. Microsoft Excel B. Google Sheets C. Tableau D. Terraform

Correct Answer: D

Question 10

What should be a key focus when collecting cloud logs?
Response:

A. Increasing storage capacity B. Ensuring log integrity C. Removing all sensitive data D. Reducing data points

Correct Answer: B

Question 11

What is a primary benefit of container orchestration in the cloud?
Response:

A. Reduced data redundancy B. Increased downtime C. Automated scaling and deployment D. Manual resource management

Correct Answer: C

Question 12

Which identity type is used to authenticate cloud services and applications?
Response:

A. Root identity B. Service identity C. User identity D. Device identity

Correct Answer: B

Question 13

What are two best practices for securing sensitive data in the cloud?
(Choose Two)
Response:

A. Allowing unrestricted access to sensitive data B. Disabling access controls C. Encrypting data at rest and in transit D. Using role-based access control

Correct Answer: C,D

Question 14

Which of the following is a common method used to collect logs in a cloud environment?
Response:

A. Verbal reporting B. Manual record-keeping C. Physical logbooks D. Automated log collection tools

Correct Answer: D

GIAC Cloud Security Essentials - GCLD Exam Practice Test