[NEW] GIAC Cloud Security Essentials (GCLD)

Identity and Access Management (20%): Deep dives into IAM concepts, RBAC, Federation, SSO, and securing privileged access.

Cloud Data Protection (15%): Understanding encryption at rest and in transit, key organizational influences project management lifecycle, and data loss prevention (DLP).

Cloud Security Architecture (20%): Designing secure VPCs, implementing network segmentation, and managing Security Groups and NACLs.

Cloud free sc 200 microsoft security operations analyst exam prep 2026 course (15%): Leveraging logging, monitoring, incident response automation, and vulnerability management in the cloud.

Governance, Risk, and Compliance (10%): Navigating regulatory frameworks like GDPR and HIPAA while managing cloud-specific risk assessments.

B. Patching the underlying operating system.

C. Configuration of application-level security and data.

D. Managing the virtualization layer.

E. Maintaining the physical cooling systems.

F. Updating the firmware on network switches.

Correct Answer: C

Explanation:

A, E, F (Incorrect): These are physical infrastructure tasks strictly managed by the Cloud Service Provider (CSP).

B, D (Incorrect): In a PaaS model, the provider handles the OS patching and virtualization layer; these would only be customer responsibilities in an IaaS model.

Question 2: Which IAM concept allows a user from one organization to access resources in another organization without requiring a local identity in the target environment?

B. Multi-Factor Authentication (MFA).

C. Federation.

D. Discretionary Access Control (DAC).

E. Password Complexity Policy.

F. Attribute-Based Access Control (ABAC).

Correct Answer: C

Explanation:

A (Incorrect): This is a security principle of limiting access, not a mechanism for cross-org identity.

B (Incorrect): MFA is a security layer for authentication, not a cross-environment identity bridge.

D (Incorrect): DAC is a type of access control where owners set permissions; it doesn't inherently handle cross-org trust.

E (Incorrect): This is a local security setting for credential strength.

F (Incorrect): ABAC uses attributes (like department) to grant access but doesn't define the cross-org trust mechanism itself.

Question 3: You are designing a secure cloud network. Which component acts as a stateless firewall, filtering traffic at the subnet level?

B. Network Access Control List (NACL).

C. Virtual Private Gateway.

D. Content Delivery Network (CDN).

E. Elastic Load Balancer (ELB).

F. Internet Gateway.

Correct Answer: B

Explanation:

A (Incorrect): Security Groups are stateful and operate at the instance/ENI level.

C (Incorrect): This connects a VPC to a VPN but does not act as a subnet firewall.

D (Incorrect): A CDN is for content caching and acceleration, not network filtering.

E (Incorrect): An ELB distributes traffic; it has security features but is not a stateless subnet firewall.

F (Incorrect): This allows communication between the VPC and the internet but doesn't filter traffic based on stateless rules.

You can retake the exams as many times as you want.

This is a huge original question bank.

You get support from instructors if you have questions.

Each question has a detailed explanation.

Mobile-compatible with the Udemy app.

30-days money-back guarantee if you're not satisfied.