GIAC Cloud Forensics Responder
Domain 5Objective 3
Microsoft Azure Storage and Networking GCFR Practice Questions (Page 2)
Part of the Microsoft Azure Forensics domain, which makes up ~31% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~22–37 in this domain), expect 6–9 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)
47questions here
10free pages
14concepts
Questions 6–10
- 6
A company has an Azure VNet with a single subnet that hosts web servers and database servers. They need to restrict traffic so that only web servers can communicate with the database servers, and only on port 1433. What is the most efficient way to achieve this?
Select an answer first - 7
A security analyst is investigating suspicious access to a storage account. They need to determine whether a specific SAS token was used to access a blob and from which IP address. Which data source should they examine?
Select an answer first - 8
During an incident response involving Azure Storage, what is the FIRST step you should take to preserve evidence?
Select an answer first - 9
In an Azure Virtual Network, what is the purpose of a subnet?
Select an answer first - 10
A forensic investigator needs to collect evidence from an Azure environment. Which of the following are valid data sources for forensic analysis? (Select all that apply.)
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCFR” is a trademark of its owner, used for identification only.