Logo ExamsQA
Exit
Official Bank 0/82

GIAC Cloud Forensics Responder (GIAC-GCFR) - GIAC Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
82 Total Questions
1
Question
Using the SOF-ELK instance at 10.0.1.7:5601, inspect the netflow logs related to the ip 5.62.19.62.

Which of the ports seen in the netflow logs associated with the ip 5.62.19.62 has the lowest count? Hint: Use a wide time frame such as 20 years to ensure all the relevant data is in the scope.
Options
A 389
B 49555
C 2341
D 80
E 2222
G. 2374
H. 2208
I. 2263
J. 22
F 443
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
Which cloud model should an organization negotiate access to logs as pert of contract negotiation prior to using the service?
Options
A PaaS
B IaaS
C Saas
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
An analyst is reviewing a case involving an actor who leveraged PowerShell Cloud Shell to achieve their goals. Where can the analyst And logs depleting this activity?
Options
A .wget hsts file
B .bash_history file
C Network flow logs for the environment
D Audit logs for the environment
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Below is an extract from a Server Access Log showing a record for a request made to an AWS S3 bucket. What does the first field starting with "385f9e" represent?

Exhibit
Options
A Request ID
B Cipher Suite
C Bucket Owner
D Host ID
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
Access Kibana via http://10.0.1.7:5601 and use the *ws-

* index pattern. Use the time range 2021-03-
01 00:00 UTC to 2021 04 U 00:00 UTC. How many ec2 DescribMnstantp*; events were performed by the root user?
Options
A 16
B 94
C 374
D 0
E 10
G. 2, 399
H. 248
I. 47
J. 229
F 6,695
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.