GIAC certification practice

GCFR Practice Questions

Try 10 free GCFR exam-style questions for GIAC Cloud Forensics Responder. Check each answer and review the explanation and source references.

Exam code
GCFR
Provider
GIAC
Free questions
10
Full set
82 questions
Last update check
Start the free questions Browse GIAC exams

Prepare for the investigative style of the GIAC Cloud Forensics Responder GCFR exam with Cert Mage’s exam-emulating Practice Questions. The quiz assesses your ability to track, investigate, and respond to incidents across AWS, Microsoft Azure, and Google Cloud environments. Questions address cloud evidence, log collection, event interpretation, attack identification, root-cause analysis, and incident response. After completing the Practice Test, review your score and study detailed explanations for correct and incorrect choices to understand the forensic reasoning behind each response.

Get Full Access
What Amazon EC2 instance prefix should be monitored to detect potential crypto mining?
Answer options

Open this question on its own page

An organization has optimized their S3 buckets to quick an their data collection across a global infrastructure. Which reflects the bucket URL root?
Answer options

Open this question on its own page

Which performance feature of an Amazon EC2 instance is configured to add additional resources based on set trigger points?
Answer options

Open this question on its own page

A data exfiltration investigation of a GCP storage bucket is limited to the information logged by default in the Cost Table of Google's Cloud Billing. What information will investigators be able to gather?
Answer options

Open this question on its own page

Which AWS Storage option is ideal for storing incident response related artifacts and logs?
Answer options

Open this question on its own page

What is the lowest level of GCP organization that consists of a logical grouping of services?
Answer options

Open this question on its own page

An investigator is evaluating a client's Microsoft 365 deployment using the web portals and has identified that the Purview compliance portal states that the Unified Audit Logs are not enabled. Based on the additional Information gathered below, what is most likely the cause of this configuration message? Subscription creation date: December 4, 2021 Number of administrators: 2 Number of non- administrative user accounts: 74 Last tenant administration change: December 4,2021
Answer options

Open this question on its own page

An analyst is reviewing a case involving an actor who leveraged PowerShell Cloud Shell to achieve their goals. Where can the analyst And logs depleting this activity?
Answer options

Open this question on its own page

What is the example AWS data below an example of? GIAC GCFR question
Answer options
An analyst successfully authenticated to Microsoft 365 using the following command. What would cause the analyst to be unable to search UAL events for a specific time period? Ps> connect fxrhangeOnline userPrincipalName sysanalystatexanpteco.com
Answer options

Open this question on its own page

Question 1 of 10

Source context

How this practice set is maintained

Maintained by the CertMage content team, this page loads questions from the exam dataset connected to its preparation resource. When an answer includes a supporting reference, it is shown with that answer so you can review the underlying vendor documentation.

Certification objectives, interfaces, and vendor services can change. Verify important details against the provider's current exam guide and documentation before your exam.

Continue practicing

View all GIAC exams
Scroll to Top