Free GIAC Cloud Forensics Responder Exam GCFR Exam Practice Test

Which performance feature of an Amazon EC2 instance is configured to add additional resources based on set trigger points?

• Burstable
• Optimized
• Managed
• Accelerated

An investigator is evaluating a client's Microsoft 365 deployment using the web portals and has identified that the Purview compliance portal states that the Unified Audit Logs are not enabled. Based on the additional Information gathered below, what is most likely the cause of this configuration message?Subscription creation date: December 4, 2021 Number of administrators: 2 Number of non- administrative user accounts: 74 Last tenant administration change: December 4,2021

• Explicitly been disabled by an administrator
• License was downgraded lower than an E5 license
• Tenant is configured to forward logs externally
• Default configuration, service was never enabled

After registering the application in Azure AD, what is the next step to take in order to use Microsoft Graph API?

• Request access tokens from Azure An
• Call the Graph API
• Configure app permission
• Get Microsoft 365 global admin approval

Access Kibana via http://10.0.1.7:5601 and use the azure-* index pattern. Between March 31st, 2021 and April 3rd, 2021, how many virtual machines were created that use a Linux operating system?

• 4
• 6
• 5
• 2
• 3
• 8
• 7
• 9
• 1
• 10

What Azure SaaS option executes workflows instead of code?

• App Service
• Batch
• Logic Apps
• Functions

Which AWS policy type specifies the maximum resource permissions for in organization or organizational unit (OU)?

• Resource
• Permission Boundaries
• Session
• Service Control

Which of the following Windows agents would need to be configured on an Azure VM for an investigator to query Its operating system logs sent to Azure Storage?

• Azure Monitor
• Diagnostic Extension
• Dependency
• Log Analytics

What AWS service will allow an organization to set custom compliance metrics and force compliance on an organizational, sub-organizational, or individual account level?

• Config
• Cognllo
• Inspector
• Security Hub

Which of the following actions described below would populate the suggestions table on an Android phone?

• Google Maps recommends locations, which are cached in the table
• Google Maps tracks previously entered destinations by the user
• The table contains previously saved or bookmarked destinations

An analyst is reviewing a case involving an actor who leveraged PowerShell Cloud Shell to achieve their goals. Where can the analyst And logs depleting this activity?

• Network flow logs for the environment
• .wget hsts file
• Audit logs for the environment
• .bash_history file