GIAC Cloud Security Automation Practice Test

These questions are part of the practice quiz. Start practicing

• What is primarily automated by Logic Apps in cloud services?
• KICS can scan which of the following technologies?
• What are security controls in the context of cloud computing?
• What query language does KICS support for custom queries?
• Which technologies are scanned by Terrascan for security and compliance issues?
• What aspect do IAM permissions manage concerning log files?
• Which AWS service provides insights into suspicious activities across various services?
• When implementing a permissions boundary in AWS, what should be noted about existing user permissions?
• What is an example of a Cloud Access Security Broker (CASB)?
• How does Azure Firewall enhance Azure Security compared to Network Security Groups?
• What is the primary function of threat modeling in cloud security?
• What is a use case of Vagrant?
• What is OPA used for in the context of policy management?
• What does the term "zero trust" refer to in cloud security?
• What is a common practice for automating cloud security compliance?
• Which of the following best describes the purpose of smoke tests?
• What does Azure Monitor's power BI functionality help managers to achieve?
• What is the main purpose of configuration management in cloud security?
• What is an AWS IAM permissions boundary?
• What does the term "nonce" refer to in cryptography?
• Which of the following describes Execution Policies in AWS Lambda?
• What is the purpose of the "prevention" mode in WAF policy?
• What is a primary benefit of implementing fine-grained container network segmentation?
• What is the purpose of centralized package management in a Lambda function?
• AWS Lambda resource policies are utilized for what purpose?
• What is a critical factor for integrating security with continuous delivery?
• What tool quickly spins up a virtual machine for integration and acceptance testing?
• What is the purpose of the Docker Actuary tool?
• What advantage do IAST tools provide over traditional testing methods?
• What is the optional feature in Azure Kubernetes that automatically provisions an ingress controller and publicly accessible DNS names for application endpoints?
• Which aspect of cloud security does Event Grid primarily facilitate?
• Within Azure Monitor, where can metric analysis be performed?
• Which JWT parameter should include a nonce to prevent replay attacks in microservices?
• Which deployment method involves pushing changes to an inactive environment and switching traffic post-testing?
• What triggers the AWS CodePipeline processes?
• Which technology can be used for secure multi-tenancy in cloud environments?
• What is often the main focus of SOAR technologies?
• What is the primary purpose of Cloud Access Security Brokers (CASB)?
• Which command does BuildKit utilize to manage secrets without hard-coding them in Dockerfiles?
• How many 512-bit strings are Azure storage account keys comprised of?
• In terraform WAF policy, what is the score that reflects a warning status?
• Which of the following is an essential component of Azure Monitor's alerting system?
• What feature in Azure functions is represented by ClaimsPrincipal objects?
• What aspect of cloud security do CIS benchmarks typically address?
• What does logging with IAM permissions NOT control?
• What does StackRox provide in relation to container security?
• How can cloud security ensure compliance with regulations?
• How does Security Orchestration, Automation, and Response (SOAR) improve incident handling?
• What benefit does threat modeling provide to cloud security?
• What protocol is widely used for secure remote management of servers and network devices?
• Which features are included in Azure Monitor for dashboards?
• How does container security differ from traditional security measures?
• Which of the following is a common concern associated with RASP implementation?
• What security benefit is enabled by using the command "aws lambda update-function-configuration" with Lambda functions?
• How can AWS CloudTrail enhance cloud security?
• Which process is enhanced by deploying SOAR solutions in a security environment?
• What functionality does the local-exec provisioner in Terraform provide?
• What functionality does Amazon's CloudFront CDN offer for cookie management?
• How can AWS RDS encryption be enabled?
• What is the purpose of an Organization Service Control Policy (SCP) in AWS?
• IAST tools are primarily used for what purpose?
• What AWS policy action is defined to grant permission for accessing parameters?
• In the context of software deployment, what does canary testing refer to?
• What type of testing is characterized by its ability to simulate real-world attack scenarios?
• What does a declarative/intentional DSL describe?
• Which features are included in the Aqua Container Security Platform?
• What does Cloud Workload Protection Platforms (CWPP) encompass in terms of infrastructure?
• For a block to occur in Terraform WAF policy "prevention mode," what must be the minimum anomaly score?
• When the Terraform code WAFPolicy is set to "Prevention" mode, what is correlated to an anomaly score before traffic is blocked?
• What outcomes should security controls aim to achieve in cloud computing?
• In the context of application security, what does fuzzing aim to accomplish?
• Which AWS feature is designed to change the status of findings in Security Hub?
• What is a key limitation of using Customer Managed Keys to encrypt data in AWS?
• What is true about backups of encrypted AWS RDS instances?
• Which of the following is a benefit of using CIS benchmarks?
• What are the main components of a security automation framework in cloud environments?
• What can Azure storage managers generate to delegate access to storage objects at a granular level?
• What is a commonly used method to safeguard against data breaches in cloud environments?
• What is the primary function of SHARR playbooks in cloud operations?
• What role does user education play in cloud security?
• What type of testing could involve monitoring the impact of different feature versions on user engagement?
• What is the primary objective of Dynamic Application Security Testing (DAST)?
• Which regulatory body is primarily associated with data protection and privacy in the cloud?
• Which CALMS element addresses Kanban workflow management technique?
• What does DevSecOps integrate into the DevOps process?
• What is a critical first step to securing cloud environments?
• Which type of resource does the specified AWS policy define access for?
• What is the purpose of encryption at rest?
• Which of the following features allows developers to release incomplete features while monitoring their effects?
• What does the term "data sovereignty" refer to in cloud security?
• What is a cloud security incident?
• What is the significance of incident response automation in cloud environments?
• What does IAST stand for?
• Which language is specifically related to creating custom queries within KICS?
• Why is continuous monitoring crucial in a cloud environment?
• AWS's Key Management Service uses which method to perform extra integrity checks when decrypting data?
• How does orchestration facilitate cloud security?
• Which of the following is a common use case for service control policies (SCPs)?
• In Azure Monitor, what is the primary task performed by a logic app?
• How can incident management processes be effectively streamlined in cloud security?
• How do SOAR tools contribute to security operations centers (SOCs)?
• What does IAM stand for in cloud security?
• How can serverless architectures impact cloud security?
• What advantage do Lambda layers provide when deploying functions?
• DAST stands for which of the following?
• Which approach is essential for managing cloud security risks effectively?
• Which of the following strategies strengthens the overall security of cloud-based systems?
• What is the principle of "least privilege" in cloud access management?
• What is Continuous Integration/Continuous Deployment (CI/CD) related to cloud security?
• What is the mode associated with a terraform WAF policy that has a score of 5?
• What does the remote-exec provisioner in Terraform do?
• What deployment strategy uses feature switches to enable incomplete features in production environments?
• What type of alerts can be generated from dynamic analysis in RASP?
• What is the purpose of automated patch management in cloud environments?
• What impact does RASP introduce that affects CPU, memory, and latency?
• How does logging and monitoring contribute to cloud security?
• How does automation in cloud security enhance threat detection capabilities?
• What term describes the traffic behavior prior to terraform WAF policy 3.1?
• In the context of AWS CodeBuild, what is the purpose of the pre_build phase?
• What is the primary goal of cloud security automation?
• What does Cloud Security Posture Management (CSPM) focus on?
• A set of automated security assertions and tests that should be run after code changes are deployed are known as?
• What does the AWS CLI command "aws logs filter-log-events" do?
• Which industry standard best practices should be aligned with SOAR implementations?
• Which feature is commonly found in Security Orchestration, Automation, and Response (SOAR) tools?
• Which cloud deployment model provides the highest level of control over security?
• What is an "event-driven" architecture in the context of cloud security automation?
• What is the purpose of CORS headers in web applications?
• What is a disadvantage of encrypting a database instance in AWS RDS?
• What function do Azure Monitor Alerts serve?
• What is a key characteristic of microservices architecture?
• Why is the integration aspect crucial for SOAR tools?
• In Terraform WAF policy anomaly scoring, which severity levels are considered?
• Which type of key is the only supported key type in AWS RDS?
• What type of security testing occurs when a scanner crawls a web page to gather HTTP GET responses?
• What crucial piece of data do you need from the "aws ec2 describe-flow-logs" command to use with the logs filter command?
• In Azure Kubernetes, what is the entire platform that includes the master and all nodes for managing containers called?
• What is a disadvantage of employing an API gateway?
• SHARR playbooks enhance operations by allowing which of the following actions?
• What must be configured for an EC2 instance profile to access a KMS key?
• What does the KMS key in CloudTrail specifically manage?
• If you encounter "NVD" in output, which tool are you likely using?
• In what way can cloud security automate defense against a DDoS attack?
• What is one of the primary benefits of using SOAR solutions?
• What is another term commonly used for Active DAST?
• Which cloud providers does Terrascan support?
• What is a primary function of the Azure ClaimsPrincipal in functions?
• What is the significance of the shared responsibility model in cloud security?
• What type of attack does a Security Orchestration, Automation, and Response (SOAR) tool specifically target?
• What best describes DAST "headless" scans?
• Where is role-based access control applied in Azure Kubernetes Service?
• Which of the following is NOT a technology that KICS can scan?
• Which framework is often used for cloud security compliance?
• What does the acronym SIEM stand for in security management?
• How can multi-factor authentication (MFA) enhance cloud security?
• What does the command query responsibility segregation (CQRS) pattern add to the architecture of APIs?
• What role do security policies play in cloud environments?
• What is the purpose of provisioners in Terraform?
• What does the Terraform provisioner do in relation to resource creation?
• Which tool is typically employed to check for security standard deviations in cloud infrastructure?
• Active DAST involves what kind of actions?
• What does it mean when an encryption state cannot be changed in AWS RDS?
• What is one of the outcomes of effectively implementing a SOAR tool?
• Why is it important to have fixed guidelines like CIS benchmarks?
• What is the cycle time crucial for in DevOps teams?
• What is a common feature required for secure access management in cloud environments?
• What is the primary purpose of CIS benchmarks?
• What is a key function of automation in Security Orchestration?
• What type of response is facilitated by SOAR tools during a security incident?
• Which activities are included in the DevOps Operations stage?
• Do CIS benchmarks enforce constraints such as "require MFA for all users and roles"?
• What is the purpose of logging and auditing in cloud environments?
• In terms of identity management, what is the goal of implementing permissions boundaries?
• What does RASP stand for in the context of application security?
• Who is allowed to decrypt the log files that are encrypted with KMS?
• What aspect does Blue Green Deployment ensure during the deployment process?
• In what way does orchestration enhance cloud security automation?
• When does continuous security monitoring take place in the DevOps workflow?
• What must be added to an Azure content delivery network to enable token authentication?
• Why is policy as code significant in the context of cloud security?
• What additional capability does Azure Firewall have that Network Security Groups do not?
• What does MFA stand for in the context of secure access management?
• Which of the following is a critical challenge addressed by SOAR tools?
• What role does continuous monitoring play in cloud security?
• Which of the following is essential for computer management using Ansible?
• Which technology is commonly associated with container orchestration?
• What does RASP stand for in the context of application security?
• What is the purpose of using a web application firewall (WAF) in cloud security?
• What is a primary characteristic of Security Orchestration?
• What is the optional security model in Azure Kubernetes that allows Azure AD users and groups to be leveraged for role-based access control?
• What characterizes a DDoS attack?
• What is a significant benefit of using Infrastructure as Code (IaC) in security?
• What is the function of AWS Security Hub?
• What advantage does using a Lambda function provide when launching CodePipeline SAST tools?
• DAST scans can be executed in which of the following manners?
• How can threat intelligence improve cloud security automation?
• Which type of keys are disclosed by implementing Infrastructure as Code (IaC)?
• What tool may be utilized to inspect an SSH configuration?
• What type of information can Security Hub provide to its users?
• What is the benefit of implementing automated compliance checks in cloud environments?
• What is a security baseline in cloud security?
• What role does threat intelligence play during the operations phase of DevOps?
• Which of the following is NOT a function of AWS Lambda resource policies?
• What is the main purpose of logging in cloud security?
• What identifies which regions will send logs to Cloud Trail?
• How does a permissions boundary affect user permissions?
• What technique is used to send changes to a percentage of servers and observe their behavior?
• What does OPA stand for in the context of security policies?
• In DevOps processes, what is relied upon for security automation tasks that react to changes in cloud resources?
• Why is encryption important in cloud security?
• What are the two types of domain-specific languages (DSLs) for configuration management?
• Which of the following is an example of a cloud-native security tool?
• Which tool can automate vulnerability scanning in cloud environments?
• What are the benefits of automating security alerts in cloud environments?
• How does cloud security automation assist in remediation efforts?
• What does data loss prevention (DLP) encompass?
• What role does Docker Scan play in cybersecurity?
• What is a requirement when using the CodePipeline in a DevOps environment?
• What is KICS primarily used for?
• What does the term "API security" encompass?
• What AWS control can ensure multi-factor authentication (MFA) is required for all IAM users and roles?
• What are runtime security measures in cloud environments designed to accomplish?
• Why is user access control vital in container security?
• In the context of DevOps, what type of activities does the term 'blameless postmortem' refer to?
• Which mode in terraform WAF policy is primarily concerned with blocking traffic?
• What is a null_resource used for in Terraform?
• Using AWS Organizations helps ensure what regarding CloudTrail?
• What does AWS RDS stand for?
• Which type of DSL is characterized by its flexibility in programming solutions?
• What is the role of Cloud Security Posture Management (CSPM)?
• What does AWS CodePipeline automate?
• What is the intent behind using a permissions boundary in IAM policies?
• What is the advantage of using a private virtual network (VPN) in cloud security?
• What is not supported by AWS RDS regarding encryption?
• In Azure Kubernetes, a service is an abstraction that defines what?
• Which feature is available with Azure Firewall but not supported by Network Security Groups?
• Which feature of AWS does the use of Organizations improve for new accounts?
• What is the optional add-on to Security Hub that provides a ready-to-deploy architecture and automated playbooks?
• What does A/B testing in deployment help to monitor?
• In addition to incident response, what other function do SOAR tools often provide?