GCFR questions and answers

What can be inferred about the ARN below?

arn:aws:!am::457787814323:user/giac

Which cloud model should an organization negotiate access to logs as pert of contract negotiation prior to using the service?

What AWS service will allow an organization to set custom compliance metrics and force compliance on an organizational, sub-organizational, or individual account level?

The Azure URI for the Develop VM is shown below.

What will change in the notation when referencing the VM's OS disk?

After registering the application in Azure AD, what is the next step to take in order to use Microsoft Graph API?

A threat actor conducts brute force attacks against SSH services to gain Initial access.
This attack technique falls under which category of the Google Workspace MITRE ATT&CK matrix?

An engineer is troubleshooting a complaint that a web server in AWS cannot receive incoming traffic, but the server can connect to the internet otherwise.

What is needed to solve this problem?

Where are iOS Class keys stored?

At what organizational level are EC2 services managed by customers?

A company using PaaS to host and develop their software application is experiencing a DOS attack.

What challenge will a DFIR analyst experience when investigating this attack?

The attack technique "Access Kubelet API" falls under which Mitre ATT&CK tactic?

What is the expected time delay for Azure AD logs to become searchable in the Microsoft 365 Unified Audit Log?