GIAC Public Cloud Security - GPCS Exam Practice Test

A. Using one cloud provider for all services

B. Using multiple cloud providers for different services to avoid vendor lock-in

C. Storing data on both physical and virtual servers

D. Managing credentials for multiple users in a single cloud

A. By encrypting data transmitted between the administrator and the cloud service.

B. By reducing the need for authentication.

C. By increasing the access speed to cloud resources.

D. By providing a dedicated physical connection to the cloud.

A. Hash-based encryption

B. One-time pad encryption

C. Symmetric encryption

D. Asymmetric encryption

A. By encrypting data based on the user's role.

B. By enforcing access rules based on the state of the user's device and location.

C. By auditing user activities in real-time.

D. By providing unrestricted access to all users to enhance usability.

A. To keep multiple versions of an object in the same bucket

B. To encrypt each version of the stored data

C. To increase the storage capacity automatically

D. To provide a backup for each object stored

A. Allow unrestricted access to network resources

B. Disable all encryption

C. Enable logging and network flow monitoring

D. Set up alerts for suspicious traffic patterns

A. Disable multi-factor authentication for VPN users

B. Limit access to trusted IP addresses

C. Allow all public IP addresses to access the VPN

D. Use encryption for all VPN connections

A. Store keys in the same location as encrypted data

B. Rotate encryption keys periodically

C. Use a hardware security module (HSM) to manage keys

D. Share encryption keys with all users for easy access

A. Store the encryption keys in the same location as the encrypted data

B. Enable multi-factor authentication (MFA) for the key management service

C. Remove encryption from the sensitive data

D. Revoke access to the compromised encryption keys

E. Rotate the encryption keys used for data at rest

A. A limit on the number of users accessing cloud resources

B. A set of best practices and standards to secure cloud environments

C. A tool used to encrypt cloud data

D. A way to increase cloud storage

A. Users only have the minimum necessary permissions to perform their tasks

B. Users have access to all services within their organization

C. Users cannot access any services without admin approval

D. Users have full access to all services

A. It acts as a firewall.

B. It mediates access between cloud users and cloud applications.

C. It provides threat intelligence and compliance reports.

D. It increases data storage capacity.

A. Enable logging and network flow monitoring for all segments

B. Investigate the logs to detect any unauthorized access

C. Grant full access between all network segments to facilitate communication

D. Review access control policies and adjust them to limit unnecessary communication

E. Disable network segmentation to simplify access

A. Use API gateways to restrict function access

B. Store sensitive credentials in the function code

C. Enable unrestricted network access for functions

D. Allow functions to access all resources

A. Role-based access control (RBAC)

B. Public IP filtering

C. Encryption using TLS/SSL

D. Data compression