~/giac-gcad · study ▊

practice sheet · all objectives switch to smart practice →

GIAC Cloud Security Architecture and Design

0/26 checked

Q_01 domain/d1 · medium single discuss →

A security architect needs to allow a batch processing workload running on-premises to authenticate to AWS machine identities without embedding long-lived AWS access keys. Which approach aligns with the cross-cloud authentication patterns taught for authenticating workloads to cloud machine identities?

A Provision the workload as a customer identity in AWS Cognito user pools
B Use certificates with AWS IAM Roles Anywhere to authenticate the workload to a cloud machine identity
C Assign the on-premises server an Azure managed identity federated through Entra External ID
D Create a conditional access policy in Entra ID that grants the server a bearer token

Q_02 domain/d1 · medium multi discuss →

A cloud architect is designing conditional access guardrails that must be portable across AWS, Azure, and Google environments. Which native services does the course associate with implementing conditional access across these three providers?

A Google BeyondCorp
B AWS Verified Access and AWS Service Control Policy (SCP)
C Entra ID Conditional Access
D AWS Cognito Identity Pools
E Azure Management Groups

Q_03 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_04 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_05 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_06 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_07 domain/d4 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_08 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_09 domain/d5 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_10 domain/d5 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_11 domain/d6 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_12 domain/d7 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_13 domain/d7 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_14 domain/d8 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_15 domain/d8 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_16 domain/d9 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_17 domain/d9 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_18 domain/d10 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_19 domain/d10 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_20 domain/d11 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_21 domain/d12 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_22 domain/d12 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_23 domain/d13 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_24 domain/d14 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_25 domain/d15 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_26 domain/d16 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

24 questions locked

unlock all 24 questions