312-49V11: Computer Hacking Forensic InvestigatorDemo

By ECCouncil · Question Mode

QuestionQ390

Tools/Systems/Programs

During a cloud-misconfiguration audit of a healthcare provider’s Azure environment in Boston, Massachusetts, examiners must inventory virtual machines, review role assignments, and export detailed resource properties across dozens of subscriptions from a Windows-based forensic workstation. The investigation depends on reusable workflows that integrate with existing Windows administrative processes, prioritize structured data handling, and do not require browser-based interaction.

How should investigators interact with Azure to enable evidence collection across numerous subscriptions and resources from a Windows-based forensic workstation?

  • A Azure CLI
  • B Azure Resource Manager
  • C Azure PowerShell
  • D Azure Portal
Explanation

Azure PowerShell provides Az cmdlets and PowerShell objects for reusable Windows automation, structured filtering and exporting, and management across multiple Azure subscriptions through subscription contexts. It supports collecting resource and access-control information without requiring the browser-based Azure Portal. Microsoft documents using Get-AzSubscription and Set-AzContext to retrieve subscriptions and switch the active Azure PowerShell context.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!