GIAC Cloud Forensics Responder
Domain 2Objective 3
Google Cloud Virtual Machines GCFR Practice Questions (Page 1)
Part of the Google Cloud Platform Forensics domain, which makes up ~26% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–31 in this domain), expect 5–8 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)
41questions here
9free pages
12concepts
Questions 1–5
- 1
Which monitoring data source can help you identify unusual network traffic to and from a VM?
Select an answer first - 2
In the lifecycle of a Google Cloud VM, which state occurs when the VM is stopped but its persistent disks and machine resources are still allocated?
Select an answer first - 3
Which feature of Shielded VMs helps ensure that the VM's bootloader and OS kernel have not been tampered with?
Select an answer first - 4
An investigator needs to determine when a Google Cloud VM was created and by whom. Which Cloud Logging data source should the investigator query?
Select an answer first - 5
What is a key forensic consideration when analyzing a Confidential VM?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCFR” is a trademark of its owner, used for identification only.