GCFR Online Practice Questions and Answers

An analyst is reviewing a case involving an actor who leveraged PowerShell Cloud Shell to achieve their goals. Where can the analyst And logs depleting this activity?

A. Network flow logs for the environment

B. .wget hsts file

C. Audit logs for the environment

D. .bash_history file

What is shown in the screenshot?

A. Google threat types

B. Windows event channels

C. Mitre ATTandCK tactics

D. CIS critical controls

What is the maximum file size for Azure Page Blob storage?

A. 10.25 TB

B. 10.25 TB

C. 8TB

D. 7TB

What AWS service will allow an organization to set custom compliance metrics and force compliance on an organizational, sub-organizational, or individual account level?

A. Config

B. Cognllo

C. Inspector

D. Security Hub

What can bedetermine about the AVVS Access Key below?

AKIAVNKBKCM4I3VNZIS3

A. The key belongs to a user account

B. The key will only work internally

C. It is a service STS token

D. It is only in use for a single session

An engineer is troubleshooting a complaint that a web server in AWS cannot receive incoming traffic, but the server can connect to the internet otherwise. What is needed to solve this problem?

A. VPC Subnet

B. NAT Gateway

C. Network Security Group

D. Internet Gateway

In which scenario would an investigator collect NetFlow logs rather than PCAP logs?

A. To save on storage space

B. For detailed network monitoring

C. For deep packet inspection

D. To collect application layer data

What 1$ a drawback of analyzing a snapshot outside of AWS?

A. Incomplete data

B. Long download time

C. Incompatible image format

D. Low latency

What information do AWS VPC flow logs collect?

A. Details of all traffic transmitted in or out of the VPC

B. Traffic between end point and load balancer interfaces

C. Contents of network traffic

D. Length of network connections

AWS VPC Flow logs are enabled. What do these logs capture?

A. TCP Checksums

B. Packet Metadata

C. TLS Handshakes

D. Payload Bytes