What is the primary role of Cloud Logging in a Google Cloud incident response workflow?

To store only audit logs and exclude application logs

To automatically remediate security incidents by applying predefined policies

To act as the central repository for logs from GCP services, enabling search, analysis, and export

To provide real-time network traffic analysis and intrusion detection

In the Google Cloud Console, which section would you navigate to in order to view and filter log entries for a specific Compute Engine instance?

Compute Engine > VM instances > Logs

You are writing a script to export log entries from Cloud Logging for analysis. Which Google Cloud client library or tool would you use to call the Cloud Logging API?

Google Cloud SDK's gcloud compute instances list

Google Cloud Client Libraries for Python or Java

A company is required to retain logs for 7 years. They currently export logs to Cloud Storage with a lifecycle policy that deletes objects after 7 years. However, an auditor requires that logs be immutable and cannot be deleted before the retention period ends. What change is needed?

Apply a retention policy with a retention lock to the bucket.

Use a different bucket for each year of logs.

Export logs to BigQuery instead.

Enable object versioning on the bucket.

GIAC Cloud Forensics Responder

Domain 2Objective 4

Log Sources for Google Cloud IR GCFR Practice Questions (Page 7)

Part of the Google Cloud Platform Forensics domain, which makes up ~26% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–31 in this domain), expect 5–8 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

9concepts

Questions 31–34

31foundation · easy
What is the primary role of Cloud Logging in a Google Cloud incident response workflow?
Select an answer first
32foundation · easy
In the Google Cloud Console, which section would you navigate to in order to view and filter log entries for a specific Compute Engine instance?
Select an answer first
33foundation · easy
You are writing a script to export log entries from Cloud Logging for analysis. Which Google Cloud client library or tool would you use to call the Cloud Logging API?
Select an answer first
34expert · hard
A company is required to retain logs for 7 years. They currently export logs to Cloud Storage with a lifecycle policy that deletes objects after 7 years. However, an auditor requires that logs be immutable and cannot be deleted before the retention period ends. What change is needed?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GCFR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCFR” is a trademark of its owner, used for identification only.