HomeCertificationsGCFA (GIAC Certified Forensic Analyst)
Advanced 1 enrolled

GCFA (GIAC Certified Forensic Analyst)

GIAC/SANS · GCFA

GIAC's advanced forensic analysis certification. Master enterprise forensics, advanced artifact analysis, timeline reconstruction, and incident response forensics.

4 exam domains6 lessons30 questions45h study time
Request access

Exam Details

Questions82
Duration180 min
Passing Score72%
Exam Cost$979

Exam Domains Covered

1

Enterprise Environment Forensics

1 lessons

2

Advanced Artifact Analysis

2 lessons

3

Timeline Analysis & Reconstruction

1 lessons

4

Incident Response Forensics

2 lessons

Sample Practice Questions

Q1. A forensic analyst uses Volatility framework to:

A.Scan networks
B.Manage vulnerabilities
C.Analyze memory dumps for malware, processes, network connections, and encryption keys
D.Test web applications

Enrol in the prep track to see the answer

Q2. Which forensic imaging tool creates a bit-for-bit copy of a drive?

A.dd / FTK Imager / EnCase
B.Wireshark
C.Nmap
D.Burp Suite

Enrol in the prep track to see the answer

What's Included

Practice Questions

30 practice questions spread across the GCFA exam domains, in a quiz at the end of each lesson.

Study Plan

Enter your exam date and the hours you can study, and get a schedule for working through the domains.

Progress Tracking

See how many lessons you have completed in each of the 4 domains.

How do you start GCFA (GIAC Certified Forensic Analyst) prep?

Request access, then add credits and enrol in this track for 30 credits. You get all 30 practice questions, a study plan and progress tracking.

Request access