nerdexam
EC-Council

312-49V11 · Question #29

Stella, a forensic investigator, is analyzing logs from a cloud environment to determine if a password leak has led to the disabling of a user account. She suspects that a change in the login…

Sign in or unlock 312-49V11 to reveal the answer and full explanation for question #29. The question stem and answer options stay visible for context.

Cloud Forensics

Question

Stella, a forensic investigator, is analyzing logs from a cloud environment to determine if a password leak has led to the disabling of a user account. She suspects that a change in the login settings may have triggered the account to be locked due to multiple failed login attempts. To verify her hypothesis, she applies various filters to examine the cloud audit logs. Which of the following filters would help Stella identify if a password leak has disabled a user account?

Options

  • Aprotopayload.metadata.event.parameter.value=DOMAIN_NAME
  • Bprotopayload.resource.labels.service="login.googleapis.com"
  • ClogName="organizations/ORGANIZATION_ID/logs/cloudaudit.googleapis.com%2Factivity"
  • Dprotopayload.resource.labels.service="admin.googleapis.com"

Unlock 312-49V11 to see the answer

You've previewed enough free 312-49V11 questions. Unlock 312-49V11 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#cloud forensics#Google Cloud audit logs#login failure detection#log filtering
Full 312-49V11 Practice