2023 Realistic Verified Free GIAC GCFR Exam Questions
GCFR Real Exam Questions and Answers FREE
NEW QUESTION # 26
After registering the application in Azure AD, what is the next step to take in order to use Microsoft Graph API?
- A. Call the Graph API
- B. Request access tokens from Azure An
- C. Configure app permission
- D. Get Microsoft 365 global admin approval
Answer: C
NEW QUESTION # 27
What is the maximum file size for Azure Page Blob storage?
- A. 10.25 TB
- B. 10.25 TB
- C. 7TB
- D. 8TB
Answer: D
NEW QUESTION # 28
Sensitive company data is found leaked on the internet, and the security team didn't get any alert and is unsure of how the breach occurred.
Which logs would be a preferable starting point for an investigation?
- A. Resource Management
- B. Application
- C. Endpoint
- D. Identity and Access Management
Answer: D
NEW QUESTION # 29
An engineer has set up log forwarding for a new data source and wants to use that data to run reports and create dashboards in Kiban a. What needs to be created in order to properly handle these logs?
- A. Parser
- B. Beat
- C. ingest script
- D. Row
Answer: A
NEW QUESTION # 30
An analyst is reviewing a case involving an actor who leveraged PowerShell Cloud Shell to achieve their goals. Where can the analyst And logs depleting this activity?
- A. .bash_history file
- B. Audit logs for the environment
- C. Network flow logs for the environment
- D. .wget hsts file
Answer: B
NEW QUESTION # 31
What would prevent GCP 1AM from linking to Google Workspace to manage users and groups?
- A. Google Workspace cannot be linked to GCP 1AM
- B. A gcp-organization-admins group was not created
- C. Inadequate Identity and Access Management license
- D. The connector was not configured to link the services
Answer: A
NEW QUESTION # 32
What will the following command do?
Install nodule -Name ExchangeOnlineManagement
- A. Enable bypassing authentication to Microsoft 365 from PowerShell
- B. Allow the use of MFA on Power Shell when connecting to Mkrosoft365
- C. Install a module for AVVS remote management from PowerShell
- D. Provide an interface to Anwon Simple Email Service from PowerShell
Answer: B
NEW QUESTION # 33
A company using PaaS to host and develop their software application is experiencing a DOS attack. What challenge will a DFIR analyst experience when investigating this attack?
- A. Network logs are unavailable for review
- B. Resource scaling will affect access to logs
- C. Network monitoring disabled by the company
- D. Restricted access to their application logs
Answer: A
NEW QUESTION # 34
An investigator is evaluating a client's Microsoft 365 deployment using the web portals and has identified that the Purview compliance portal states that the Unified Audit Logs are not enabled. Based on the additional Information gathered below, what is most likely the cause of this configuration message?
Subscription creation date: December 4, 2021 Number of administrators: 2 Number of non-administrative user accounts: 74 Last tenant administration change: December 4,2021
- A. Tenant is configured to forward logs externally
- B. Explicitly been disabled by an administrator
- C. Default configuration, service was never enabled
- D. License was downgraded lower than an E5 license
Answer: C
NEW QUESTION # 35
Communication between the VPN client and Azure VNet1 via VPN Tunnel #1 is using which of the following connections?
- A. Point-to-site VPN
- B. IPSec
Answer: A
NEW QUESTION # 36
Which AWS authentication method provides temporary, limited privilege credentials for 1AM users or federated users?
- A. API Key
- B. SAML Token
- C. lAMRole
Answer: C
NEW QUESTION # 37
Which AWS policy type specifies the maximum resource permissions for in organization or organizational unit (OU)?
- A. Session
- B. Permission Boundaries
- C. Resource
- D. Service Control
Answer: D
NEW QUESTION # 38
Which performance feature of an Amazon EC2 instance is configured to add additional resources based on set trigger points?
- A. Managed
- B. Accelerated
- C. Burstable
- D. Optimized
Answer: C
NEW QUESTION # 39
A cloud administrator needs to determine which user account allowed SSH Inbound from the internet on an Azure Network security group. Which type of log does the administrator need to examine?
- A. Subscription
- B. Tenant
- C. Resource
- D. Operating System
Answer: C
NEW QUESTION # 40
Below is an extract from a Server Access Log showing a record for a request made to an AWS S3 bucket. What does the first field starting with "385f9e" represent?
- A. Host ID
- B. Bucket Owner
- C. Request ID
- D. Cipher Suite
Answer: C
NEW QUESTION # 41
Which cloud service provider produces sampled flow logs?
- A. AWS
- B. Azure
- C. GCP
Answer: C
NEW QUESTION # 42
What is shown in the screenshot?
- A. Windows event channels
- B. Mitre ATT&CK tactics
- C. CIS critical controls
- D. Google threat types
Answer: B
NEW QUESTION # 43
The Azure URI for the Develop VM is shown below. What will change in the notation when referencing the VM's OS disk?
- A. Subscription ID
- B. Resource Group
- C. Resource Type
- D. Provider
Answer: C
NEW QUESTION # 44
What is the expected time delay for Azure AD logs to become searchable in the Microsoft 365 Unified Audit Log?
- A. 5 to 15 minutes
- B. Up to 24 hours
- C. 24 to 48 hours
- D. Up to 6 hours
Answer: B
NEW QUESTION # 45
......
Exam Dumps GCFR Practice Free Latest GIAC Practice Tests: https://www.troytecdumps.com/GCFR-troytec-exam-dumps.html
GCFR Exam Questions | Real GCFR Practice Dumps: https://drive.google.com/open?id=1Y74kMT1PzvdgjT6TbM-1ODrClXyP9os-