GIAC Cloud Forensics Responder (GCFR) (GCFR) Free Practice Test

Question 1

What is a best practice recommendation when using API keys for AWS access?

A. Enable MFA protection

B. Configure STS one-time tokens

C. Delete the account's default access keys

D. Define specific role permissions

Correct Answer: C

Question 2

Which is the effective access when aws user is assigned to an S3 bucket?

A. A user must have the AWS IAM role assigned

B. A user must have an employee account

C. A user must have an account under any AWS account

D. A user must be under the same AWS account as the S3 bucket

Correct Answer: D

Question 3

Which of the following Windows agents would need to be configured on an Azure VM for an investigator to query Its operating system logs sent to Azure Storage?

A. Diagnostic Extension

B. Dependency

C. Log Analytics

D. Azure Monitor

Correct Answer: A

Question 4

What unique identifier is used by AWS to identify a specific account and allow integration with external organizations?

A. SID

B. ARN

C. Public Key

D. Token

Correct Answer: B

Question 5

What is shown in the screenshot?

A. Google threat types

B. Mitre ATT&CK tactics

C. Windows event channels

D. CIS critical controls

Correct Answer: B

Question 6

Which cloud service provider produces sampled flow logs?

A. Azure

B. GCP

C. AWS

Correct Answer: B

Question 7

An investigator confirms that phishing emails sent to users in an organization ate not being sent to their Gmall Spam folder. What is a possible cause for this?

A. The default setting for enhanced pre-delivery message scanning was changed

B. Compliance based rules need to be configured to detect phishing emails

C. A third party application needs to be installed to detect phishing emails

D. The security sandbox default configuration setting was changed

Correct Answer: A

Question 8

What is the example AWS data below an example of?

A. S3 Configuration

B. Network Security Group

C. EC2 Configuration

D. IAM Policy

Correct Answer: D

Question 9

A company is creating an incident response team that will be part of their existing GCP Organization. Where in the organizational structure should their services be placed?

A. ln a dedicated Folder

B. At the root Organization

C. With the Resources

D. As part of d Project

Correct Answer: A

Welcome to TestSimulate

GIAC Cloud Forensics Responder (GCFR) (GCFR) Free Practice Test