GIAC Certification GIAC Cloud Security Automation

Question 1

Which GIAC certification validates skills in securing cloud environments through automation, DevSecOps, and infrastructure as code?

Accepted Answer

GCSA

Answer

The GIAC Cloud Security Automation (GCSA) certifies professionals in cloud security automation, DevSecOps practices, and securing CI/CD pipelines.

Question 2

What AWS service provides centralized security findings and compliance checks across multiple AWS accounts?

Accepted Answer

AWS Security Hub

Answer

AWS Security Hub aggregates security findings from multiple AWS services and third-party tools to provide a centralized security posture view.

Question 3

What principle ensures cloud resources have only the minimum permissions necessary to perform their intended function?

Accepted Answer

Least privilege

Answer

The principle of least privilege limits cloud IAM permissions to only what is required for a role's specific function, reducing attack surface.

Question 4

Which Infrastructure as Code (IaC) tool uses declarative HCL language to provision and manage cloud resources?

Accepted Answer

Terraform

Answer

Terraform uses HashiCorp Configuration Language (HCL) to declaratively define and provision infrastructure across multiple cloud providers.

Question 5

What type of cloud security tool scans Infrastructure as Code templates for security misconfigurations before deployment?

Accepted Answer

IaC security scanner (SAST for IaC)

Answer

IaC security scanners like Checkov, tfsec, and Terrascan analyze Terraform or CloudFormation files for security misconfigurations before resources are deployed.

GIAC Certification Practice Test

GIAC Certification Practice Test

GIAC Certification GIAC Cloud Security Automation