GCLD 無料問題集「GIAC Cloud Security Essentials」

（A）By standardizing one vendor for all cloud services regardless of their security posture

（B）By assuming that all cloud vendors meet necessary compliance standards without verification

（C）By choosing the least expensive cloud service providers to reduce operational costs

（D）By conducting thorough due diligence and continuous monitoring of the cloud service provider's practices

（A）Security policies

（B）Compliance requirements

（C）Investments

（D）Threats

（A）Ensuring log integrity

（B）Reducing data points

（C）Removing all sensitive data

（D）Increasing storage capacity

（A）Ignoring any anomalies detected in access patterns for secrets.

（B）Regularly reviewing and updating access policies related to secrets.

（C）Storing all secrets in a single, well-known location for convenience.

（D）Enforcing the principle of least privilege when accessing secrets.

（A）To provide a flexible and non-prescriptive approach to security

（B）To eliminate the need for organizational security policies

（C）To ensure that there is a minimal focus on compliance

（D）To establish a standardized approach to managing and mitigating security risks

（A）Manual resource management

（B）Increased downtime

（C）Reduced data redundancy

（D）Automated scaling and deployment

（A）Dividing a network into smaller, manageable parts

（B）Decreasing the bandwidth of a network

（C）Increasing the size of a network

（D）Merging different network segments into one

（A）Defining and categorizing assets

（B）Mitigating identified risks

（C）Assigning monetary value to data

（D）Identifying threats

（A）Assigning permanent access

（B）Enforcing least privilege access

（C）Implementing temporary credentials

（D）Using shared accounts