GIAC Public Cloud Security 認定 GPCS 試験問題:

1. Which AWS service feature can be used to automate the encryption of new objects added to a bucket?
Response:

A) S3 Bucket Policies
B) AWS Shield
C) AWS Lambda
D) AWS KMS

2. You are responsible for securing sensitive customer data stored in a public cloud. Your organization uses a key management service to encrypt data at rest. However, you've recently discovered that unauthorized individuals gained access to the key management interface due to weak access controls. What immediate actions should you take to secure the data and prevent further unauthorized access?
(Choose three)
Response:

A) Enable multi-factor authentication (MFA) for the key management service
B) Revoke access to the compromised encryption keys
C) Rotate the encryption keys used for data at rest
D) Remove encryption from the sensitive data
E) Store the encryption keys in the same location as the encrypted data

3. What is the role of Function-as-a-Service (FaaS) in cloud security?
Response:

A) It enables database management for serverless applications
B) It provides multi-factor authentication for cloud users
C) It provides encryption for cloud storage
D) It allows users to manage and deploy serverless functions securely

4. In a multicloud setup, why is credential management fundamentally challenging?
Response:

A) It leads to less frequent security incidents.
B) It decreases the overall cost of security management.
C) It simplifies the management of resources.
D) Each cloud provider may have different security frameworks and interfaces.

5. Which best practices should be followed for securing long-term cloud credentials?
(Choose two)
Response:

A) Share credentials with all team members
B) Disable encryption for easier access
C) Store credentials in encrypted form
D) Use multi-factor authentication for accessing credentials

質問と回答：