GIAC GCFR - Questions & Answers

A cloud administrator needs to determine which user account allowed SSH Inbound from the internet on an Azure Network security group.

Which type of log does the administrator need to examine?

Which AWS authentication method provides temporary, limited privilege credentials for 1AM users or federated users?

An investigator is evaluating a client's Microsoft 365 deployment using the web portals and has identified that the Purview compliance portal states that the Unified Audit Logs are not enabled. Based on the additional Information gathered below, what is most likely the cause of this configuration message?

Subscription creation date: December 4, 2021 Number of administrators: 2 Number of non-administrative
user accounts: 74 Last tenant administration change: December 4,2021

An analyst is reviewing a case involving an actor who leveraged PowerShell Cloud Shell to achieve their goals.

Where can the analyst And logs depleting this activity?

Which AWS Storage option is ideal for storing incident response related artifacts and logs?

Which is a limitation of AWS Lambdas?

Which of the following actions described below would populate the suggestions table on an Android phone?

Which performance feature of an Amazon EC2 instance is configured to add additional resources based on set trigger points?

An engineer is looking for the log of API calls recorded by CloudTrail for the past 6 months.

Where should they look for the oldest data?

What is the lowest level of GCP organization that consists of a logical grouping of services?