100%合格率リアルGPCS試験成功を掴み取れ！[2025年03月]
GIAC GPCSのPDF問題格別な練習GIAC Public Cloud Security
質問 # 80
What are the best practices for managing credentials in a multicloud environment?
(Choose two)
Response:
- A. Hardcode credentials in applications for easy access
- B. Use identity federation to reduce the use of long-term credentials
- C. Store credentials in encrypted form
- D. Share credentials across all cloud providers
正解：B、C
質問 # 81
What role do bastion hosts play in securing cloud environments?
Response:
- A. They act as primary data storage locations.
- B. They provide physical security for server hardware.
- C. They serve as dedicated nodes for initial access and management of other servers.
- D. They increase the complexity of network infrastructure.
正解：C
質問 # 82
What does the principle of least privilege ensure in cloud IAM?
Response:
- A. Users cannot access any services without admin approval
- B. Users have access to all services within their organization
- C. Users have full access to all services
- D. Users only have the minimum necessary permissions to perform their tasks
正解：D
質問 # 83
How do best practices for storing long-term credentials help protect cloud environments?
(Choose Three)
Response:
- A. By enabling quick recovery of credentials if they are lost.
- B. By automating the encryption of credentials at rest.
- C. By keeping credentials up-to-date with regular updates and patches.
- D. By reducing the likelihood of unauthorized access.
- E. By ensuring credentials are only accessible to necessary personnel.
正解：B、D、E
質問 # 84
Which encryption keys management practices are recommended for cloud data protection?
(Choose Two)
Response:
- A. Rotate encryption keys periodically.
- B. Store keys in a publicly accessible repository for easy access.
- C. Use a dedicated security module for key management.
- D. Use the same keys across multiple platforms for consistency.
正解：A、C
質問 # 85
What is the best practice for managing access to cloud application services?
Response:
- A. Applying the principle of least privilege.
- B. Regularly changing service URLs for security.
- C. Assigning administrative rights to all users.
- D. Using a single strong password for all services.
正解：A
質問 # 86
Which measures should be taken to secure a Google Firebase database?
(Choose Three)
Response:
- A. Monitoring and logging all access and queries to detect anomalies.
- B. Allowing direct database access from the internet to increase performance.
- C. Ensuring that database backups are publicly accessible for transparency.
- D. Configuring strong security rules to define who has access.
- E. Encrypting data stored in Firebase at rest and in transit.
正解：A、D、E
質問 # 87
What is a primary benefit of using symmetric encryption for data at rest in the cloud?
Response:
- A. It allows for easy key distribution.
- B. It is faster than asymmetric encryption.
- C. It supports digital signatures.
- D. It provides non-repudiation.
正解：B
質問 # 88
Which of the following are types of data masking suitable for protecting sensitive data in cloud environments?
(Choose Two)
Response:
- A. Dynamic data masking
- B. Transparent data masking
- C. Asymmetric data masking
- D. Static data masking
正解：A、D
質問 # 89
You are responsible for securing sensitive customer data stored in a public cloud. Your organization uses a key management service to encrypt data at rest. However, you've recently discovered that unauthorized individuals gained access to the key management interface due to weak access controls. What immediate actions should you take to secure the data and prevent further unauthorized access?
(Choose three)
Response:
- A. Rotate the encryption keys used for data at rest
- B. Remove encryption from the sensitive data
- C. Enable multi-factor authentication (MFA) for the key management service
- D. Revoke access to the compromised encryption keys
- E. Store the encryption keys in the same location as the encrypted data
正解：A、C、D
質問 # 90
Which of the following is a key consideration when securing virtual private networks (VPNs) in a cloud environment?
Response:
- A. Limiting VPN access to public endpoints
- B. Allowing open access to all IP addresses
- C. Ensuring encryption is used for all VPN connections
- D. Disabling authentication for easier access
正解：C
質問 # 91
Which are common components of a cloud IAM policy?
(Choose Two)
Response:
- A. Encryption algorithms
- B. User attributes
- C. Resource tags
- D. Access rights
正解：B、D
質問 # 92
What is a best practice when configuring serverless functions for improved security?
Response:
- A. Enable unrestricted network access for functions
- B. Allow functions to access all resources
- C. Use API gateways to restrict function access
- D. Store sensitive credentials in the function code
正解：C
質問 # 93
What is crucial when configuring security rules in Google Firebase to prevent unauthorized access?
Response:
- A. Encouraging users to use weak passwords for ease of access.
- B. Allowing all traffic to ensure maximum availability.
- C. Setting all database rules to public to simplify management.
- D. Limiting database reads and writes to authenticated users.
正解：D
質問 # 94
What is the primary security feature of using secure, dedicated administrative workstations for cloud management?
Response:
- A. They provide faster access to cloud resources.
- B. They allow administrators to bypass standard security checks.
- C. They ensure that administrative tasks are performed from machines with hardened security configurations.
- D. They reduce the cost of managing cloud resources.
正解：C
質問 # 95
......
GPCS問題集Fast2test100%合格率保証：https://jp.fast2test.com/GPCS-premium-file.html