GIAC Cloud Security Automation 認定 GCSA 試験問題:

1. Which tool is commonly used for collecting and analyzing logs in cloud environments?
Response:

A) Jenkins
B) Splunk
C) Terraform
D) Docker

2. Which of the following are common features of secret keepers and vaults?
(Select all that apply)
Response:

A) Automatic backups of secrets
B) Integration with third-party authentication systems
C) Versioning of secrets
D) Encryption of stored secrets

3. Which of the following is a critical aspect to consider when implementing microservice security in a DevOps environment?
Response:

A) Long-term data archiving strategies
B) Strong encryption of communication channels
C) Periodic service downtime for maintenance
D) Frequent team-building activities

4. Which of the following is a best practice for securing infrastructure as code?
Response:

A) Reducing infrastructure logging
B) Disabling infrastructure monitoring
C) Using version control systems for IaC templates
D) Manually updating infrastructure configurations

5. When might a blue/green deployment strategy be more appropriate than a canary deployment strategy?
Response:

A) When the application requires a gradual rollout to all users
B) When there is a need to minimize downtime during updates
C) When the team wants to test new features on a small subset of users first
D) When there are concerns about compatibility with existing systems

質問と回答：