GIAC Cloud Forensics Responder
Domain 5Objective 2
Microsoft Azure Virtual Machines GCFR Practice Questions (Page 7)
Part of the Microsoft Azure Forensics domain, which makes up ~31% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~22–37 in this domain), expect 6–9 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)
43questions here
9free pages
10concepts
Questions 31–35
- 31
An incident responder needs to collect volatile memory from a running Azure VM without stopping it. Which method is most appropriate?
Select an answer first - 32
Which method of collecting forensic data from an Azure VM involves creating a snapshot of the OS disk and attaching it to a separate forensic VM for analysis?
Select an answer first - 33
Which Azure service provides application-consistent backups of Azure VMs, which can be used as a source of forensic evidence?
Select an answer first - 34
Which Azure feature captures serial console output and screenshots of a VM to help diagnose boot failures, which can be useful in forensic investigations?
Select an answer first - 35
Which Azure component acts as a virtual firewall that filters inbound and outbound traffic to and from a VM based on rules?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCFR” is a trademark of its owner, used for identification only.