GIAC certification preparation

GCFR Practice Questions

Practice exam-style questions, check your answers, and review explanations and source references where they are available.

Exam
GCFR
Provider
GIAC
Full set
82 questions
Last Update Check
Browse GIAC exams View exam questions

Prepare for the investigative style of the GIAC Cloud Forensics Responder GCFR exam with Cert Mage’s exam-emulating Practice Questions. The quiz assesses your ability to track, investigate, and respond to incidents across AWS, Microsoft Azure, and Google Cloud environments. Questions address cloud evidence, log collection, event interpretation, attack identification, root-cause analysis, and incident response. After completing the Practice Test, review your score and study detailed explanations for correct and incorrect choices to understand the forensic reasoning behind each response.

Get Full Access
What Amazon EC2 instance prefix should be monitored to detect potential crypto mining?
Answer options
An organization has optimized their S3 buckets to quick an their data collection across a global infrastructure. Which reflects the bucket URL root?
Answer options
Which performance feature of an Amazon EC2 instance is configured to add additional resources based on set trigger points?
Answer options
A data exfiltration investigation of a GCP storage bucket is limited to the information logged by default in the Cost Table of Google's Cloud Billing. What information will investigators be able to gather?
Answer options
Which AWS Storage option is ideal for storing incident response related artifacts and logs?
Answer options
What is the lowest level of GCP organization that consists of a logical grouping of services?
Answer options
An investigator is evaluating a client's Microsoft 365 deployment using the web portals and has identified that the Purview compliance portal states that the Unified Audit Logs are not enabled. Based on the additional Information gathered below, what is most likely the cause of this configuration message? Subscription creation date: December 4, 2021 Number of administrators: 2 Number of non- administrative user accounts: 74 Last tenant administration change: December 4,2021
Answer options
An analyst is reviewing a case involving an actor who leveraged PowerShell Cloud Shell to achieve their goals. Where can the analyst And logs depleting this activity?
Answer options
What is the example AWS data below an example of? GIAC GCFR question
Answer options
An analyst successfully authenticated to Microsoft 365 using the following command. What would cause the analyst to be unable to search UAL events for a specific time period? Ps> connect fxrhangeOnline userPrincipalName sysanalystatexanpteco.com
Answer options
Question 1 of 10

Source context

How this practice set is maintained

Maintained by the CertMage content team, this page loads questions from the exam dataset connected to its preparation resource. When an answer includes a supporting reference, it is shown with that answer so you can review the underlying vendor documentation.

Certification objectives, interfaces, and vendor services can change. Verify important details against the provider's current exam guide and documentation before your exam.

Continue practicing

View all GIAC exams
GPEN Free GPEN Practice Quiz with Answers and Explanations. Open practice questions GCCC Free GCCC Practice Quiz with Answers and Explanations. Open practice questions GCED Free GCED Practice Quiz with Answers and Explanations. Open practice questions GCFA Free GCFA Practice Quiz with Answers and Explanations. Open practice questions GCIA Free GCIA Practice Quiz with Answers and Explanations. Open practice questions GPYC Free GPYC Practice Quiz with Answers and Explanations. Open practice questions
Scroll to Top