GIAC Cloud Security Automation (GCSA) Free Practice Test

Question 1

What is the recommended practice for storing and retrieving sensitive data in cloud secret keepers and vaults?
Response:

A. Using API calls to retrieve secrets dynamically

B. Storing secrets in plaintext format

C. Hardcoding secrets directly into application code

D. Storing secrets in publicly accessible repositories

Correct Answer: A

Question 2

How do automated scanners support Compliance as Code?
Response:

A. By automatically detecting and reporting compliance issues in code

B. By generating financial reports for the organization

C. By manually reviewing code for compliance

D. By enhancing network speed and efficiency

Correct Answer: A

Question 3

What is the purpose of namespaces in Kubernetes security?
Response:

A. To organize the logs

B. To reduce the number of available services

C. To segregate resources and provide isolation between services

D. To increase system performance

Correct Answer: C

Question 4

Which of the following are key components of Kubernetes security?
(Select all that apply)
Response:

A. Service accounts

B. Virtual machines

C. Namespaces

D. Docker containers

Correct Answer: A,C

Question 5

What are two key security concerns related to configuration management as code?
(Choose Two)
Response:

A. Manual configuration updates

B. Inadequate access control

C. Misconfigured automation

D. Increased system complexity

Correct Answer: B,C

Question 6

Which security mechanism is commonly used to manage access to Kubernetes clusters?
Response:

A. Disabling container logging

B. Static password management

C. Role-based access control (RBAC)

D. Public access permissions

Correct Answer: C

Welcome to TestSimulate