Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GCFR Exam - Topic 1 Question 19 Discussion

Posted by Rolande on May 22, 2024 at 05:27 PM

Access Kibana via http://10.0.1.7:5601 and use the *ws-* index pattern. Use the time range 2021-03-01 00:00 UTC to 2021 04 U 00:00 UTC. How many ec2 DescribMnstantp*; events were performed by the root user?

Suggested Answer: B

Get Premium GCFR Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
39 comments · newest first
ME
Meaghan 10 months ago
Wait, are we sure about the time range?
PA
Paris 11 months ago
Definitely not 0, that's for sure.
SH
Sherman 11 months ago
I got 374, looks more reasonable.
IR
Irma 11 months ago
No way, that seems way too high!
PA
Pansy 11 months ago
I found 6,695 events for the root user.
HA
Hana 11 months ago
I’m leaning towards 94, but I’m not entirely confident about the time range affecting the count.
WI
William 12 months ago
I feel like the number of ec2 DescribInstances events could be quite high, maybe around 374 or 6,695?
MA
Margery 12 months ago
I think the last practice question had a similar format, but I can't recall the exact number of events.
SE
Selma 12 months ago
I remember practicing with Kibana, but I’m not sure if I counted the events correctly.
BO
Bobbye 12 months ago
Whoa, this is a lot of specifics to keep track of. Index pattern, time range, event name, and user. I'm going to have to take this step-by-step and make sure I don't miss anything. Probably a good idea to write down the key details before I start searching. Gotta be careful on this one.
HA
Hannah 12 months ago
Okay, I've got this. Access Kibana, use the ws-* index, and look at the time range from March 1 to April 1. Then I just need to find the events with "DescribMnstantp*" in the name that were performed by the root user. Should be pretty straightforward, just need to make sure I'm precise with the query.
EL
Elvera 1 year ago
Hmm, this seems a bit tricky. I'll need to make sure I get the index pattern and time range right. And I'm not totally sure what "DescribMnstantp*" events are. I'll have to dig into that a bit more to understand what I'm looking for. Hopefully I can figure it out.
DW
Dwight 1 year ago
Okay, let's see. I need to access Kibana, use the ws-* index pattern, and look at the time range from March 1 to April 1, 2021. Then I need to find the number of DescribMnstantp* events performed by the root user. I think I can handle this, just need to focus on the details.
JA
Jaclyn 1 year ago
Indexing seems like the most logical function of web spiders, so I'm going to go with option A.
JO
Josephine 1 year ago
Hmm, I'm a bit unsure about this one. The question mentions maintaining high availability, so I'll need to be careful not to introduce any downtime during the resizing process. Let me re-read the options and see which one best addresses that.
AR
Arlyne 1 year ago
I'm a bit confused about the difference between the "Purchase, accrual" and "Purchase expenditure, un-invoiced" accounts. I'll need to review those details.
BE
Bea 1 year ago
Okay, I think I've got this. If the users are reporting MFA prompts they didn't initiate, then configuring the Fraud alert settings should allow us to automatically block those users. Seems like a good solution.
VI
Vicente 1 year ago
Hmm, this question is making me hungry. I could really go for a nice, juicy root beer right about now. Anyway, I'm feeling E) 0. Gotta keep 'em guessing, you know?
ME
Meaghan 1 year ago
Ah, the classic 'DescribMnstantp*' event. I can smell the aroma of AWS logs from here. I'm gonna go with H) 248, because why not?
AN
Anika 1 year ago
↳ replying to Meaghan
I agree with H) 248.
BA
Basilia 1 year ago
↳ replying to Meaghan
I'll choose A) 374.
MA
Malcolm 1 year ago
↳ replying to Meaghan
I'm going with G) 2,399.
LU
Lucina 1 year ago
↳ replying to Meaghan
I think the answer is C) 6,695.
AU
Audra 1 year ago
Okay, let's get serious here. I'm going to go with the classic D) 94. It's a nice, respectable number, not too high, not too low. Gotta play it safe, right?
VE
Vernell 1 year ago
Whoa, this is a tough one. I'm feeling a bit like a 'root' user myself, trying to figure this out. Maybe B) 16 is the way to go?
NO
Noah 1 year ago
↳ replying to Vernell
I'll go with C) 6,695, it seems like a reasonable number.
SI
Silva 1 year ago
↳ replying to Vernell
I'm not sure, maybe we should double-check the data.
GL
Glenn 1 year ago
↳ replying to Vernell
I think B) 16 sounds like a good guess.
TI
Timmy 1 year ago
Hmm, let's see... I'll go with C) 6,695. That's a nice, juicy number. Feels right, you know?
EL
Elmira 1 year ago
↳ replying to Timmy
User4: I'll go with H) 248.
BR
Brynn 1 year ago
↳ replying to Timmy
User3: I'll choose C) 6,695.
HO
Hollis 1 year ago
↳ replying to Timmy
User3: I agree with User2, G) 2,399 sounds about right.
DO
Dong 1 year ago
↳ replying to Timmy
User2: I'm going with G) 2,399.
FR
France 1 year ago
↳ replying to Timmy
User2: User1, I'm going with G) 2,399.
SA
Salome 1 year ago
↳ replying to Timmy
User1: I think I'll go with A) 374.
AN
Antonio 1 year ago
↳ replying to Timmy
User1: I think I'll go with A) 374.
CO
Coletta 2 years ago
I'm not sure, but I think it might be A) 374.
SA
Sabra 2 years ago
I believe it's G) 2,399.
RI
Ricarda 2 years ago
I think the answer is C) 6,695.
0/2000 characters

Save Cancel