GIAC Cloud Security Essentials - GCLD Exam Questions [2026]

QUESTION NO: 1
Which of the following is a common threat to cloud networks?
Response:

A. DDoS attacks B. Data corruption C. Misconfigurations D. Power outages

Correct Answer: A

QUESTION NO: 2
When deploying compute resources, which two practices help maintain a minimal attack surface?
(Choose Two)
Response:

A. Enabling all available services and protocols by default. B. Regularly applying security patches and updates. C. Implementing a policy of open network access. D. Disabling unnecessary services and ports.

Correct Answer: B,D

QUESTION NO: 3
What are two key aspects of cloud identity management?
(Choose Two)
Response:

A. Public access controls B. Biometric access management C. Continuous monitoring D. Identity federation

Correct Answer: C,D

QUESTION NO: 4
What is a key challenge in cloud network security monitoring?
Response:

A. Handling large volumes of network traffic logs B. Ensuring user convenience C. Minimizing encryption D. Reducing data retention

Correct Answer: A

QUESTION NO: 5
What is the primary goal of secrets management in cloud environments?
Response:

A. To reduce operational overhead B. To simplify access controls for all users C. To store sensitive data in plain text D. To protect sensitive information like API keys and passwords

Correct Answer: D

QUESTION NO: 6
Which of the following are core benefits of using a recognized security framework?
(Choose two)
Response:

A. It helps in aligning security practices with business objectives. B. It guarantees the prevention of all security breaches. C. It provides structured guidance for securing information and managing risks. D. It absolves the organization of legal responsibilities related to data breaches.

Correct Answer: A,C

QUESTION NO: 7
What is a fundamental practice in cloud automation to ensure infrastructure can be quickly provisioned and managed?
Response:

A. Avoiding the use of templates and blueprints. B. Using descriptive labels and tags for cloud resources. C. Relying solely on graphical user interface tools for deployment. D. Regularly deleting logs to save storage space.

Correct Answer: B

QUESTION NO: 8
What are two key steps in implementing threat-informed defense in the cloud?
(Choose Two)
Response:

A. Ignoring external threats B. Prioritizing high-impact threats C. Identifying potential threats D. Disabling monitoring tools

Correct Answer: B,C

QUESTION NO: 9
Effective cloud account management includes understanding identity types. Which of the following are primary identity types in cloud environments?
(Choose Three)
Response:

A. Network endpoints. B. Device identities. C. Application APIs. D. User identities.

Correct Answer: B,C,D

QUESTION NO: 10
How does rotation of secrets contribute to a secure cloud environment?
Response:

A. By increasing the duration that a single secret is valid. B. By making it easier for attackers to guess old secrets. C. By periodically changing secrets to limit the exposure of any single secret. D. By reducing the need for monitoring and logging access to secrets.

Correct Answer: C

QUESTION NO: 11
What is a critical benefit of utilizing automation for continuous and repeatable evaluation tasks in the cloud?
Response:

A. Consistent execution of evaluation tasks. B. Decreased operational efficiency. C. Increased chances of human error. D. Reduced ability to scale operations.

Correct Answer: A