GIAC Cloud Security Architecture and Design

0/2 checked

Q_01 domain/d1 · medium single discuss →

A security architect needs to allow a batch processing workload running on-premises to authenticate to AWS machine identities without embedding long-lived AWS access keys. Which approach aligns with the cross-cloud authentication patterns taught for authenticating workloads to cloud machine identities?

A Provision the workload as a customer identity in AWS Cognito user pools
B Use certificates with AWS IAM Roles Anywhere to authenticate the workload to a cloud machine identity
C Assign the on-premises server an Azure managed identity federated through Entra External ID
D Create a conditional access policy in Entra ID that grants the server a bearer token

Q_02 domain/d1 · medium multi discuss →

A cloud architect is designing conditional access guardrails that must be portable across AWS, Azure, and Google environments. Which native services does the course associate with implementing conditional access across these three providers?

A Google BeyondCorp
B AWS Verified Access and AWS Service Control Policy (SCP)
C Entra ID Conditional Access
D AWS Cognito Identity Pools
E Azure Management Groups

GIAC Cloud Security Architecture and Design

Explanation

Explanation