GIAC Cloud Forensics Responder
Domain 5Objective 3
Microsoft Azure Storage and Networking GCFR Practice Questions (Page 9)
Part of the Microsoft Azure Forensics domain, which makes up ~31% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~22–37 in this domain), expect 6–9 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)
47questions here
10free pages
14concepts
Questions 41–45
- 41
In an NSG security rule, which of the following is NOT a typical attribute used to match traffic?
Select an answer first - 42
Which component of an Azure Virtual Network defines the IP address range that the VNet uses?
Select an answer first - 43
A security analyst needs to determine whether a specific blob was accessed from a suspicious IP address during a security incident. Which Azure Storage logging feature should the analyst use to find this information?
Select an answer first - 44
A forensic analyst needs to create a storage account that will hold only block blobs and append blobs for an archive of log files. Which Azure Storage account type is designed specifically for this purpose?
Select an answer first - 45
When collecting network evidence from Azure during an incident, which action is most appropriate to capture network traffic data for later analysis?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCFR” is a trademark of its owner, used for identification only.