Cyber Security GCFR Full Course Free

GIAC Cloud Forensics Responder (GCFR) Questions and Answers

Question 21

What is shown in the screenshot?

Google threat types

Windows event channels

Mitre ATT&CK tactics

CIS critical controls

Question 22

At what point of the OAuth delegation process does the Resource Owner approve the scope of access to be allowed?

After user credentials are accepted by the Authorization Server

Once the OAuth token is accepted by the Application

When the Resource Server receives the OAuth token

Before user credentials are sent to the Authentication Server

Question 23

Using the SOF-ELK instance at 10.0.1.7:5601, inspect the netflow logs related to the ip 5.62.19.62.

Which of the ports seen in the netflow logs associated with the ip 5.62.19.62 has the lowest count?

Hint: Use a wide time frame such as 20 years to ensure all the relevant data is in the scope.

2341

389

443

49555

2222

2374

Question 24

An engineer is looking for the log of API calls recorded by CloudTrail for the past 6 months. Where should they look for the oldest data?

Lambda ephemeral storage

S3 bucket

requestParameters