Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GCFR Exam - Topic 1 Question 13 Discussion

Posted by Carin on Mar 08, 2024 at 04:24 AM

An attacker successfully downloaded sensitive data from a misconfigured GCP bucket. Appropriate logging was not enabled. Where can an analyst find the rough time and quantity of the data downloaded?

Suggested Answer: B

Get Premium GCFR Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
45 comments · newest first
EL
Ellsworth 10 months ago
Definitely not Cloud Trace, that’s for performance monitoring!
AL
Alba 11 months ago
Wait, can you really find download quantities in the Billing Section? Sounds odd.
CL
Cletus 11 months ago
Security Command Center might help too, but not sure.
LA
Lauran 11 months ago
I think Cloud Logging would have more detailed info, though.
LE
Leota 11 months ago
Billing Section is the right place to check for data usage.
JE
Jerilyn 11 months ago
Security Command Center sounds like it would have relevant info, but I don't recall it being focused on download specifics.
VE
Vernell 12 months ago
I feel like Cloud Trace is more for performance monitoring, not really for tracking data downloads.
JA
Janessa 12 months ago
I'm not entirely sure, but I remember something about Cloud Logging being useful for tracking access events.
MI
Misty 12 months ago
I think the Billing Section might show the data transfer costs, which could give a rough idea of the quantity downloaded.
OZ
Ozell 12 months ago
Security Command Center might be worth a look too. That's where a lot of the security-focused monitoring and alerting lives in GCP, so there's a chance it could have some relevant data.
LE
Lenny 1 year ago
The Cloud Trace option sounds promising - that could potentially give us some insight into the activity, even if the full logging wasn't enabled. I'll make sure to check that out.
LO
Lonna 1 year ago
Hmm, I'm not sure about this one. Without any logging enabled, I'm not sure where we'd be able to find the details on the data download. The billing section might have some high-level usage information, but probably not the specifics we need.
KI
Kimbery 1 year ago
I think the answer is probably in the Cloud Logging section, since that's where you'd expect to find detailed logs of activity in the GCP environment.
FL
Flo 1 year ago
Hmm, I'm not sure about this one. I'd need to look into the different features a bit more to decide which one would work best for finding employee resumes.
ER
Erick 1 year ago
Okay, I've got this. A constructive obligation is when a change in the company's informal practices would cause unacceptable damage to its relationship with employees. I'm confident that option C is the correct answer.
RI
Rikki 1 year ago
UNION is the way to go. It's a straightforward solution that will give you the combined results of both queries without any complications.
JO
Johnathon 1 year ago
Hmm, let's see... Billing Section, Cloud Trace, Cloud Logging, Security Command Center. Sounds like a bad comedy routine. I'll take 'Cloud Logging' for 500, Alex!
CO
Colene 1 year ago
↳ replying to Johnathon
Always important to have the right tools in place for monitoring and analysis.
DO
Dorthy 1 year ago
↳ replying to Johnathon
Phew, good thing I picked the right option!
GW
Gwenn 1 year ago
↳ replying to Johnathon
Great choice! Cloud Logging is the right place to look for that information.
MA
Marge 1 year ago
↳ replying to Johnathon
That's correct! Cloud Logging is where an analyst can find the rough time and quantity of the data downloaded.
AL
Alica 1 year ago
↳ replying to Johnathon
That's correct! Cloud Logging is where an analyst can find the rough time and quantity of the data downloaded.
CL
Clarence 1 year ago
↳ replying to Johnathon
Cloud Logging
DE
Denae 1 year ago
↳ replying to Johnathon
Cloud Logging
LA
Lauran 1 year ago
B) C;loud Trace? Is that a typo or some kind of new cloud service I haven't heard of? Stick to the classics, folks - Cloud Logging is the way to go.
YV
Yvonne 1 year ago
↳ replying to Lauran
D) Security Command Center
YU
Yuki 1 year ago
↳ replying to Lauran
C) Cloud Logging
GL
Glory 1 year ago
↳ replying to Lauran
B) Cloud Trace
GE
Georgiana 1 year ago
↳ replying to Lauran
C) Cloud Logging
FL
Florinda 1 year ago
↳ replying to Lauran
B) Cloud Trace
SH
Shannon 1 year ago
↳ replying to Lauran
A) Billing Section
FE
Felix 1 year ago
↳ replying to Lauran
A) Billing Section
YO
Yoko 1 year ago
I'm not sure, but I think it could also be in Security Command Center.
AL
Allene 1 year ago
A) Billing Section? Really? What are we, accountants? This is a security issue, not a finance one. Cloud Logging is the obvious choice.
GI
Gianna 1 year ago
↳ replying to Allene
I agree, Cloud Logging is where we should look for that information.
EL
Elvera 1 year ago
↳ replying to Allene
Cloud Logging is the best option for finding the time and quantity of data downloaded.
NI
Nichelle 1 year ago
D) Security Command Center sounds fancy, but I doubt it'll have the specifics we need here. Gotta stick with the basics - Cloud Logging is where it's at.
LA
Lasandra 2 years ago
I agree with Mike, Cloud Logging should have the rough time and quantity of data downloaded.
CA
Carin 2 years ago
C) Cloud Logging is the way to go! That's where you'll find the details on the data download. Gotta love those logs, they're the bread and butter of any good security investigation.
AL
Alexis 1 year ago
↳ replying to Carin
C) Cloud Logging is the way to go! That's where you'll find the details on the data download. Gotta love those logs, they're the bread and butter of any good security investigation.
KR
Kris 1 year ago
↳ replying to Carin
D) Security Command Center
CH
Cherrie 1 year ago
↳ replying to Carin
C) Cloud Logging
BE
Benedict 1 year ago
↳ replying to Carin
B) Cloud Trace
SH
Shonda 1 year ago
↳ replying to Carin
A) Billing Section
MI
Mike 2 years ago
I think the analyst can find that information in Cloud Logging.
0/2000 characters

Save Cancel