GIAC Certified Incident Handler (GCIH) — Question 155

Which of the following logs could be queried to identify Azure, Amazon and Google storage use in an organization?

Answer options

• A. DNS
• B. Authentication
• C. Web Server
• D. HTTP Proxy

Correct answer: D

Explanation

The correct answer is D, HTTP Proxy, as it logs web traffic and can provide insights into cloud storage services being accessed. Options A, B, and C do not specifically track storage usage; DNS logs focus on name resolution, Authentication logs track user sign-ins, and Web Server logs record requests to hosted websites, not cloud storage services.