
GIAC Cloud Forensics Responder
Domain 5Objective 3
Microsoft Azure Storage and Networking GCFR Practice Questions (Page 1)
Part of the Microsoft Azure Forensics domain, which makes up ~31% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~22–37 in this domain), expect 6–9 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)
47questions here
10free pages
14concepts
Questions 1–5
- 1
Which Azure feature allows you to route Storage Analytics logs and metrics to multiple destinations such as a Log Analytics workspace, an event hub, or an archival storage account?
Select an answer first - 2
A security team suspects that a storage account was accessed using a stolen shared access signature (SAS) token. They need to determine which blobs were accessed and from which IP addresses. Which combination of steps should they take?
Select an answer first - 3
A company stores 2 TB of historical access logs in an Azure Storage account. The logs are accessed only during annual compliance audits, but when accessed, the entire dataset must be available within 30 minutes. The storage team wants to minimize storage cost while meeting the retrieval requirement. Which access tier should they use?
Select an answer first - 4
Which Azure service is a Layer 4 load balancer that distributes TCP and UDP traffic to virtual machines in the backend pool?
Select an answer first - 5
A web application is running on VMs in an availability set. The application requires session affinity and SSL offloading. Which load balancing solution should you use?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCFR” is a trademark of its owner, used for identification only.