New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

GIAC GCFR Exam - Topic 1 Question 19 Discussion

Actual exam question for GIAC's GCFR exam
Question #: 19
Topic #: 1
[All GCFR Questions]

Access Kibana via http://10.0.1.7:5601 and use the *ws-* index pattern. Use the time range 2021-03-01 00:00 UTC to 2021 04 U 00:00 UTC. How many ec2 DescribMnstantp*; events were performed by the root user?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Rolande at May 22, 2024, 05:27 PM

Limited Time Offer

25%

Off

Get Premium GCFR Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Meaghan
3 months ago
Wait, are we sure about the time range?
upvoted 0 times
...
Paris
3 months ago
Definitely not 0, that's for sure.
upvoted 0 times
...
Sherman
3 months ago
I got 374, looks more reasonable.
upvoted 0 times
...
Irma
4 months ago
No way, that seems way too high!
upvoted 0 times
...
Pansy
4 months ago
I found 6,695 events for the root user.
upvoted 0 times
...
Hana
4 months ago
I’m leaning towards 94, but I’m not entirely confident about the time range affecting the count.
upvoted 0 times
...
William
4 months ago
I feel like the number of ec2 DescribInstances events could be quite high, maybe around 374 or 6,695?
upvoted 0 times
...
Margery
4 months ago
I think the last practice question had a similar format, but I can't recall the exact number of events.
upvoted 0 times
...
Selma
5 months ago
I remember practicing with Kibana, but I’m not sure if I counted the events correctly.
upvoted 0 times
...
Bobbye
5 months ago
Whoa, this is a lot of specifics to keep track of. Index pattern, time range, event name, and user. I'm going to have to take this step-by-step and make sure I don't miss anything. Probably a good idea to write down the key details before I start searching. Gotta be careful on this one.
upvoted 0 times
...
Hannah
5 months ago
Okay, I've got this. Access Kibana, use the ws-* index, and look at the time range from March 1 to April 1. Then I just need to find the events with "DescribMnstantp*" in the name that were performed by the root user. Should be pretty straightforward, just need to make sure I'm precise with the query.
upvoted 0 times
...
Elvera
5 months ago
Hmm, this seems a bit tricky. I'll need to make sure I get the index pattern and time range right. And I'm not totally sure what "DescribMnstantp*" events are. I'll have to dig into that a bit more to understand what I'm looking for. Hopefully I can figure it out.
upvoted 0 times
...
Dwight
5 months ago
Okay, let's see. I need to access Kibana, use the ws-* index pattern, and look at the time range from March 1 to April 1, 2021. Then I need to find the number of DescribMnstantp* events performed by the root user. I think I can handle this, just need to focus on the details.
upvoted 0 times
...
Jaclyn
5 months ago
Indexing seems like the most logical function of web spiders, so I'm going to go with option A.
upvoted 0 times
...
Josephine
5 months ago
Hmm, I'm a bit unsure about this one. The question mentions maintaining high availability, so I'll need to be careful not to introduce any downtime during the resizing process. Let me re-read the options and see which one best addresses that.
upvoted 0 times
...
Arlyne
5 months ago
I'm a bit confused about the difference between the "Purchase, accrual" and "Purchase expenditure, un-invoiced" accounts. I'll need to review those details.
upvoted 0 times
...
Bea
5 months ago
Okay, I think I've got this. If the users are reporting MFA prompts they didn't initiate, then configuring the Fraud alert settings should allow us to automatically block those users. Seems like a good solution.
upvoted 0 times
...
Vicente
9 months ago
Hmm, this question is making me hungry. I could really go for a nice, juicy root beer right about now. Anyway, I'm feeling E) 0. Gotta keep 'em guessing, you know?
upvoted 0 times
...
Meaghan
9 months ago
Ah, the classic 'DescribMnstantp*' event. I can smell the aroma of AWS logs from here. I'm gonna go with H) 248, because why not?
upvoted 0 times
Anika
8 months ago
I agree with H) 248.
upvoted 0 times
...
Basilia
8 months ago
I'll choose A) 374.
upvoted 0 times
...
Malcolm
8 months ago
I'm going with G) 2,399.
upvoted 0 times
...
Lucina
9 months ago
I think the answer is C) 6,695.
upvoted 0 times
...
...
Audra
10 months ago
Okay, let's get serious here. I'm going to go with the classic D) 94. It's a nice, respectable number, not too high, not too low. Gotta play it safe, right?
upvoted 0 times
...
Vernell
10 months ago
Whoa, this is a tough one. I'm feeling a bit like a 'root' user myself, trying to figure this out. Maybe B) 16 is the way to go?
upvoted 0 times
Noah
8 months ago
I'll go with C) 6,695, it seems like a reasonable number.
upvoted 0 times
...
Silva
8 months ago
I'm not sure, maybe we should double-check the data.
upvoted 0 times
...
Glenn
9 months ago
I think B) 16 sounds like a good guess.
upvoted 0 times
...
...
Timmy
10 months ago
Hmm, let's see... I'll go with C) 6,695. That's a nice, juicy number. Feels right, you know?
upvoted 0 times
Elmira
8 months ago
User4: I'll go with H) 248.
upvoted 0 times
...
Brynn
9 months ago
User3: I'll choose C) 6,695.
upvoted 0 times
...
Hollis
9 months ago
User3: I agree with User2, G) 2,399 sounds about right.
upvoted 0 times
...
Dong
9 months ago
User2: I'm going with G) 2,399.
upvoted 0 times
...
France
9 months ago
User2: User1, I'm going with G) 2,399.
upvoted 0 times
...
Salome
9 months ago
User1: I think I'll go with A) 374.
upvoted 0 times
...
Antonio
10 months ago
User1: I think I'll go with A) 374.
upvoted 0 times
...
...
Coletta
11 months ago
I'm not sure, but I think it might be A) 374.
upvoted 0 times
...
Sabra
11 months ago
I believe it's G) 2,399.
upvoted 0 times
...
Ricarda
11 months ago
I think the answer is C) 6,695.
upvoted 0 times
...

Save Cancel