~/giac-geir · study ▊

← all exams

practice sheet · all objectives switch to smart practice →

GIAC Enterprise Incident Response

0/49 checked
Q_01 domain/d1 · medium single discuss →

During an M365 investigation, a responder needs to detect suspicious user logon and email activity across Exchange and other hosted services. Which log source is described as the common method for this type of detection?

Q_02 domain/d1 · medium multi discuss →

An IR team wants to automate common response tasks in AWS to enable faster, more effective analysis. Which two AWS services are specifically recommended for automation and orchestration?

Q_03 domain/d1 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_04 domain/d1 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_05 domain/d1 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_06 domain/d1 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_07 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_08 domain/d2 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_09 domain/d2 · easy single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_10 domain/d2 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_11 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_12 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_13 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_14 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_15 domain/d3 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_16 domain/d3 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_17 domain/d3 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_18 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_19 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_20 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_21 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_22 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_23 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_24 domain/d5 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_25 domain/d5 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_26 domain/d5 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_27 domain/d5 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_28 domain/d5 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_29 domain/d5 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_30 domain/d6 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_31 domain/d6 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_32 domain/d6 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_33 domain/d7 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_34 domain/d7 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_35 domain/d7 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_36 domain/d7 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_37 domain/d7 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_38 domain/d8 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_39 domain/d8 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_40 domain/d8 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_41 domain/d9 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_42 domain/d9 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_43 domain/d9 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_44 domain/d9 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_45 domain/d11 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_46 domain/d11 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_47 domain/d11 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_48 domain/d11 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review
Q_49 domain/d11 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

47 questions locked

unlock all 47 questions