MENU
A company using PaaS to host and develop their software application is experiencing a DOS attack. What challenge will a DFIR analyst experience when investigating this attack?
Suggested Answer: C
Get Premium GCFR Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
30 comments · newest first
LE
Lelia
6 months ago
A is a real challenge. Without logs, how do you trace back?
LO
Louisa
6 months ago
I lean towards B. Scaling can really complicate things.
CE
Celestine
6 months ago
D is unlikely. Companies usually keep monitoring active.
RO
Rolland
7 months ago
C makes sense too. If network logs are gone, it's tough to investigate.
EL
Elroy
7 months ago
I feel A is more accurate. Restricted access is a big issue.
EL
Elke
7 months ago
I think it's B. Resource scaling can mess with log access.
JO
Josphine
8 months ago
D) Disabling network monitoring? That's a huge red flag!
KI
Kina
8 months ago
Wait, how can network logs be unavailable? That seems odd.
MA
Markus
8 months ago
B) Resource scaling might complicate things too.
DE
Denae
8 months ago
Totally agree, logs are crucial for investigation!
CA
Caitlin
8 months ago
Resource scaling affecting log access? That's like trying to catch a greased pig while blindfolded. Good luck, DFIR analyst!
TI
Tiera
8 months ago
"Network monitoring disabled by the company" - Ah, the classic "security through obscurity" approach. Bold move, let's see how that plays out.
HO
Holley
9 months ago
I vaguely remember a case where network monitoring was disabled, but I don't know if that's typical for PaaS setups.
FE
Felice
9 months ago
I feel like network logs being unavailable is a common problem in these scenarios, but I can't recall if it's the right answer.
PE
Peggy
9 months ago
I think resource scaling could complicate log access, but I'm not entirely sure if that's the main issue here.
LE
Leana
9 months ago
Hmm, and if the company has disabled network monitoring, that's just going to compound the problem. We'll be flying blind without that data.
CH
Chantell
9 months ago
Yikes, and if the network logs are unavailable, that's going to make it really hard to piece together what's happening. Gotta watch out for that.
RO
Rochell
9 months ago
Ah, good point. And if the company is scaling resources to handle the attack, that could also affect our ability to get the logs we need.
MY
Myrtie
10 months ago
Network logs unavailable? Sounds like the company needs to rethink their security strategy. Or maybe they just really hate DFIR analysts.
DE
Desmond
10 months ago
A) Restricted access to their application logs is a big issue.
LO
Loise
10 months ago
The DFIR analyst will have a hard time accessing the logs, that's for sure. PaaS can be a real headache when it comes to investigations.
KR
Kristeen
10 months ago
Restricted access to application logs? That's a bummer. Gotta love the cloud, right? *sarcasm*
LE
Leana
10 months ago
I remember studying about how PaaS environments can limit access to certain logs, so A seems plausible.
SA
Sang
11 months ago
Okay, let's see. I'm guessing restricted access to application logs could be a big issue, since the PaaS provider might limit what we can access.
LA
Lauran
11 months ago
Hmm, this one seems tricky. I'll need to think carefully about the challenges a DFIR analyst might face when investigating a DOS attack on a PaaS-hosted application.
LO
Lonna
5 months ago
So many layers to this! Each option presents a real challenge.
SO
Sol
5 months ago
True, but if monitoring is disabled, how can they even investigate?
ST
Staci
6 months ago
What about network logs? If they're unavailable, that's a huge problem.
LA
Lashawn
6 months ago
Definitely! But resource scaling might complicate things too.
MA
Margart
6 months ago
I think restricted access to logs could be a major issue.