GIAC Cloud Forensics Responder
Domain 2Objective 2
Google Cloud Storage and Networking GCFR Practice Questions (Page 6)
Part of the Google Cloud Platform Forensics domain, which makes up ~26% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–31 in this domain), expect 5–8 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)
37questions here
8free pages
10concepts
Questions 26–30
- 26
A forensic investigator is examining a GCP environment where a VPN tunnel connects the on-premises network to a VPC. They suspect that an attacker may have used the VPN tunnel to access internal resources. The investigator has access to VPC flow logs, Cloud VPN logs, and on-premises firewall logs. Which analysis would be most effective in determining if traffic traversed the VPN tunnel?
Select an answer first - 27
Which Cloud Storage object metadata field indicates the last time the object's content was modified?
Select an answer first - 28
In Google Cloud VPC, which component defines the allowed ingress and egress traffic for VM instances?
Select an answer first - 29
What is the primary purpose of VPC flow logs in Google Cloud?
Select an answer first - 30
Which field in a VPC flow log record indicates the direction of the traffic relative to the VM instance?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCFR” is a trademark of its owner, used for identification only.