GPCS by GIAC Actual Free Exam Q&As

Question 1

Which steps should be taken to secure remote access to cloud services?
(Choose two)
Response:

A. Enforce multi-factor authentication (MFA) B. Allow public IP access without restrictions C. Disable encryption for remote connections D. Use virtual private networks (VPNs)

Discussion 0

Correct Answer: A,D Vote an answer

Question 2

How can continuous integration/continuous deployment (CI/CD) pipelines enhance the security of cloud applications?
Response:

A. By automatically deploying every change without review to speed up development. B. By focusing only on functionality and not on security testing. C. By using less secure, older versions of software to ensure compatibility. D. By including security checks and tests in the deployment processes.

Discussion 0

Correct Answer: D Vote an answer

Question 3

Which of the following is a key consideration when storing long-term credentials in a cloud environment?
Response:

A. Grant all users access to credentials B. Store credentials in plain text for easy access C. Use encryption and restrict access to minimize security risks D. Store credentials on multiple devices for redundancy

Discussion 0

Correct Answer: C Vote an answer

Question 4

What is a significant security concern in a multicloud environment?
Response:

A. Decreased network traffic. B. Consistency of security policies across platforms. C. Increased computational overhead. D. Easier data management.

Discussion 0

Correct Answer: B Vote an answer

Question 5

Which AWS service feature can be used to automate the encryption of new objects added to a bucket?
Response:

A. AWS Shield B. S3 Bucket Policies C. AWS Lambda D. AWS KMS

Discussion 0

Correct Answer: B Vote an answer

Question 6

Which are effective practices for securing long-term cloud credentials?
(Choose Two)
Response:

A. Utilize a centralized identity management solution. B. Regularly audit and review access logs. C. Store credentials as hardcoded values in applications. D. Implement automated rotation of credentials.

Discussion 0

Correct Answer: A,D Vote an answer

Question 7

How does multi-factor authentication (MFA) enhance security for cloud environments?
Response:

A. It decreases the time required to log in. B. It replaces traditional password-based systems entirely. C. It uses several pieces of evidence to authenticate a user. D. It requires users to provide multiple passwords.

Discussion 0

Correct Answer: C Vote an answer

Question 8

What is the main purpose of cloud application firewalls?
Response:

A. To control access to virtual machines B. To block malicious traffic and prevent web-based attacks C. To improve data storage efficiency D. To reduce data redundancy

Discussion 0

Correct Answer: B Vote an answer

Question 9

Which tool is commonly used to assess the security compliance of cloud environments?
Response:

A. AWS EC2 B. AWS Config C. AWS Lambda D. AWS S3

Discussion 0

Correct Answer: B Vote an answer

Question 10

Which of the following should be considered when implementing end-to-end encryption in a hybrid cloud environment?
(Choose Two)
Response:

A. The physical security of data centers. B. Compatibility of encryption standards between cloud and on-premises environments. C. Key management and distribution policies. D. The cost of the cloud storage.

Discussion 0

Correct Answer: B,C Vote an answer

Question 11

Which cloud service is commonly used to enforce multi-factor authentication (MFA) for cloud user accounts?
Response:

A. AWS CloudFormation B. AWS VPC C. AWS S3 D. AWS IAM

Discussion 0

Correct Answer: D Vote an answer

Question 12

What is the primary function of a Virtual Private Network (VPN)?
Response:

A. To provide a secure connection over a public network B. To increase the bandwidth of internet connections C. To serve as a firewall between internal and external networks D. To monitor network traffic and logging

Discussion 0

Correct Answer: A Vote an answer

Question 13

What role do bastion hosts play in securing cloud environments?
Response:

A. They provide physical security for server hardware. B. They serve as dedicated nodes for initial access and management of other servers. C. They increase the complexity of network infrastructure. D. They act as primary data storage locations.

Discussion 0

Correct Answer: B Vote an answer

Question 14

In managing long-term credentials for cloud services, what is considered a best practice?
Response:

A. Regularly rotating credentials manually. B. Sharing credentials between team members via email. C. Using environment variables to store sensitive credentials securely. D. Storing credentials in plaintext within scripts.

Discussion 0

Correct Answer: C Vote an answer

Question 15

What is a common method for preventing data exfiltration in cloud storage services?
Response:

A. Disabling data encryption B. Enabling multi-factor authentication (MFA) C. Setting up egress firewall rules D. Reducing storage redundancy

Discussion 0

Correct Answer: C Vote an answer

GIAC Public Cloud Security - GPCS Exam Practice Test