A fully updated 2023 GCFR Exam Dumps exam guide from training expert Test4Cram [Q49-Q72]

Rate this post

A fully updated 2023 GCFR Exam Dumps exam guide from training expert Test4Cram

Provides complete coverage of every objective on exam and exam preparation GCFR

Q49. In which scenario would an investigator collect NetFlow logs rather than PCAP logs?

To save on storage space

For detailed network monitoring

For deep packet inspection

To collect application layer data

Q50. What would prevent GCP 1AM from linking to Google Workspace to manage users and groups?

A gcp-organization-admins group was not created

The connector was not configured to link the services

Inadequate Identity and Access Management license

Google Workspace cannot be linked to GCP 1AM

Q51. What is the maximum file size for Azure Page Blob storage?

10.25 TB

8TB

7TB

Q52. A client was responsible for their environment’s OS, then they delegated this responsibility to their cloud provider. Which of the following migrations could describe this scenario?

On-prern to UdS

SaaStoOn-prem

IaaS to PaaS

PaaS to SaaS

Q53. The Azure URI for the Develop VM is shown below. What will change in the notation when referencing the VM’s OS disk?

Resource Type

Provider

Resource Group

Subscription ID

Q54. Which AW5 1AM policy element indicates the API that is in scope?

Effect

Version

Action

Resource

Q55. In Azure, which of the following describes a “Contributor”?

A collection of permissions such as read, write, and delete

A designation on a PKI certificate

A specification of who can access a resource group

An object representing an entity

Q56. Which statement describes how an organization could use IPv6 in a Google Cloud deployment?

IPv6 has to be configured for each compute node Individually

IPv6 b enabled by default for global traffic between VPCs

IPv6 is enabled by default for traffic within VPCs

IPv6 needs to be terminated at an edge load balancer

Q57. What information do AWS VPC flow logs collect?

Details of all traffic transmitted in or out of the VPC

Traffic between end point and load balancer interfaces

Contents of network traffic

Length of network connections

Q58. Which cloud service provider produces sampled flow logs?

GCP

Azure

AWS

Q59. Which performance feature of an Amazon EC2 instance is configured to add additional resources based on set trigger points?

Burstable

Optimized

Managed

Accelerated

Q60. An Azure blob is accessed using the link below. What is the name of the blob container?

ex-storage

mov.avi

mymovies

blob.core

Q61. What Pub/Sub component is used to forward GCP logs to their final location?

Topic

Log Sink

Publication

Subscription

Q62. How is storage account, cs21003200042c87633, created in an Azure resource group?

PowerShell Cloud Shell audit logging was enabled

A Bash Cloud Shell was used

PowerShelI Cloud Shell was used

Azure CLI was used from a Windows machine

Q63. Where are iOS Class keys stored?

In iCloud

Within the metadata of each file

Between the flash memory and the system area on the device

In effacable storage

Q64. The Azure PowerShell output below is an example of which of the following?

Role assignment

Managed identity

Role definition

Service principal

Q65. An analyst is reviewing a case involving an actor who leveraged PowerShell Cloud Shell to achieve their goals. Where can the analyst And logs depleting this activity?

Network flow logs for the environment

.wget hsts file

Audit logs for the environment

.bash_history file

Q66. What can be inferred about the ARN below?
arn:aws:!am::457787814323:user/giac

giac’s is a user In the AWS account 457787814323

giac’s access Is testf kted to resources owned by AWS tenant 457787814323

giac’s Is limited to roles defined under a single AWS organization

giac’s user’s access key 10 is 457787814323

Q67. What method does Google use to alert Gmail account holders that they may be under attack by government sponsored attackers?

Message upon successful logon

SMS text message

Email sent to the user

Alert sent to recovery account

Q68. Below is an extract from a Server Access Log showing a record for a request made to an AWS S3 bucket. What does the first field starting with “385f9e” represent?

Bucket Owner

Request ID

Host ID

Cipher Suite

Q69. An attacker successfully downloaded sensitive data from a misconfigured GCP bucket. Appropriate logging was not enabled. Where can an analyst find the rough time and quantity of the data downloaded?

Billing Section

C;loud Trace

Cloud Logging

Security Command Center

Q70. An engineer has set up log forwarding for a new data source and wants to use that data to run reports and create dashboards in Kiban a. What needs to be created in order to properly handle these logs?

Row

Parser

ingest script

Beat

Q71. What Amazon EC2 instance prefix should be monitored to detect potential crypto mining?