GIAC Cloud Forensics Responder (GCFR) - GIAC Actual Exam Questions
Last updated on April 25, 2026
An analyst is reviewing a case involving an actor who leveraged PowerShell Cloud Shell to achieve their goals. Where can the analyst And logs depleting this activity?
Network flow logs for the environment
.wget hsts file
Audit logs for the environment
.bash_history file
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Which cloud model should an organization negotiate access to logs as pert of contract negotiation prior to using the service?
IaaS
PaaS
Saas
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Access Kibana via http://10.0.1.7:5601 and use the *ws-* index pattern. Use the time range 2021-03- 01 00:00 UTC to 2021 04 U 00:00 UTC. How many ec2 DescribMnstantp*; events were performed by the root user?
374
16
6,695
94
0
10
2, 399
248
47
229
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
What approach can be used to enable Mac instances on AWS?
Emulating the M1 processor using ARM clusters
Installing OS X exclusively on I (Burstable) instance
Using physical Mac computers in the data center
Virtualizing OS X on Unix servers
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Which performance feature of an Amazon EC2 instance is configured to add additional resources based on set trigger points?
Burstable
Optimized
Managed
Accelerated
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Finish Practice?
Are you sure you want to finish? This will end your practice session.