Cyber Security GCFR Book

GIAC Cloud Forensics Responder (GCFR) Questions and Answers

Question 9

Microsoft.Key Vault is an example of which component of Azure's structure?

Options:

Resource manager

Resource

Resource provider

Resource group

Question 10

An investigator is evaluating a client's Microsoft 365 deployment using the web portals and has identified that the Purview compliance portal states that the Unified Audit Logs are not enabled. Based on the additional Information gathered below, what is most likely the cause of this configuration message?

Subscription creation date: December 4, 2021 Number of administrators: 2 Number of non-administrative user accounts: 74 Last tenant administration change: December 4,2021

Options:

Explicitly been disabled by an administrator

License was downgraded lower than an E5 license

Tenant is configured to forward logs externally

Default configuration, service was never enabled

Question 11

What is the example AWS data below an example of?

Options:

EC2 Configuration

S3 Configuration

Network Security Group

IAM Policy

Question 12

Access Kibana via and use the *ws-* index pattern. Use the time range 2021-03-0100:00 UTC to 2021 04 U 00:00 UTC. How many ec2 DescribMnstantp*; events were performed by the root user?

Options:

374

6,695

2, 399

Winter Special - Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: top65certs

GIAC Cloud Forensics Responder (GCFR) Questions and Answers

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

CompTIA

Fortinet

Microsoft

Salesforce