Digital Forensics and Incident Response | DFIR
  • Blog
  • Infosec
  • Windows Forensics
  • Mac Forensics
  • Memory Forensics
  • Incident Response
  • Contact

GIAC GCFA - GIAC Certified Forensic Analyst Exam Preparation Tips

9/8/2019

17 Comments

 
Picture
I want to share my recent preparation and GCFA exam experience. I took the SANS FOR-508 Course a while ago. I have following tips for you if you are planning to prepare for GCFA Exam. 

Learn about the pattern of the exam from this link: https://www.giac.org/certification/certified-forensic-analyst-gcfa

    •    115 questions in 3 hours are challenging ~ 1 minute and 30 seconds for each question. 
    •    Passing percentage is 71%; therefore, you need to get ~82 questions right
    •   GCFA will test your detailed understanding of the material like Key Concepts, Facts, Tools, and other granular details mentioned in the SANS FOR 508 Books. 
    •    It's challenging to find and answer a question in 1 minute 30 seconds. You'll need a way to search the content quickly.
    •    Read all the books 2-3 time, highlight the essential things, and add the keywords/definition to your index.
    •    Make a useful index - there are two methods.
    1)    https://tisiphone.net/2015/08/18/giac-testing/
    2)   Make an index with keyword, definition, page-number, book number, and sort it alphabetically.
    •    Make Mind-Maps and glue it on the back of each book (example below)
    •    SANS Posters works as a quick reference guide. Carry all FOR 508 related posters
   •    Take the Practice Test as you are taking an actual exam. It's just like an exam simulation, and the level of the practice test is similar to the real exam.
   •  I'd also recommend you to practice SANS FOR-508 Workbook to understand all the concepts in a better way. The exam is designed to test your expertise and comprehension of the material.

Feel free to reach out to me if you have any additional questions.

 


Picture
Picture
17 Comments
Netw0k
9/18/2019 08:23:05 pm

I'm going to take the exam next week. I would like you to share your exam experience to me :). Did you find the real exam questions as same as the practice exam questions? Cheers

Reply
4n6
9/24/2019 10:16:26 pm

The real question in the exam were not same as the practice exam but the difficult level was similar. If you pass the practice test with 80% +, you'll pass the exam comfortably.

Reply
Phuong Tran link
11/27/2019 07:47:56 pm

Hi, Thank you very much for the sharing!
Can you share me your mindmap you created for the FOR508 Tools?
Thanks again!

My-e: denmilu@gmail.com

Reply
Lamaris Davis
12/18/2019 01:41:15 pm

What's the biggest thing you did to help you achieve success on this exam?

Reply
Glenn
1/23/2020 06:18:32 pm

Hi, is it possible you share your index ? —> cannibal.growl at gmail com - Thanks

Reply
Chris Alarcon
2/19/2020 08:24:17 pm

This is very useful. I'll be taking my next month. Do you rememer all the posters they gave you? I only have the hunt evil and windows Forensic Analysis

Reply
Mo
3/3/2020 06:45:16 am

Is GCIH ot GCFE required before getting GCFA?

Reply
Ako
3/21/2020 09:43:25 pm

not required.

Reply
Anh Hoang
4/10/2020 09:01:32 pm

The best way to pass GCFA is your Index all 5 book in one excel sheet.

Reply
gautham
6/16/2020 04:50:05 am


WOW, great stuff ,

Can you share me your mindmap you created for the FOR508 Tools?

Thanks again!

My-e: itpreetham@gmail.com

Reply
Ray
7/7/2020 04:08:36 pm

Hi, your mind map is a really interesting touch!
Are you able to share your mindmap you created for the FOR508 tools please, if you don't mind?
Thanks so much.

My email: Dubbler89@gmail.com

Reply
ace
7/12/2020 07:34:23 pm

All the stuff is already on the blog, just download the images.

Reply
mem
8/19/2020 08:50:47 am

I just passed the exam, and actually the real exam was way difficult than the practice. I got 89+ on the practice exams, however in the real exam there is no even one question that is similar to the practice exam. Overall, it is challenging but so worth it.
For the preparation, I almost did the same above + I summarized all 5 books in two notebooks :))

Reply
Bisanawa
10/29/2020 09:09:32 pm

Hi,

Thank you for sharing your experience.

Are you able to share your mindmap you created for the FOR508 tools please, if you don't mind ?

Thanks so much.

My email: cyber509.ccne@gmail.com

Reply
Maiale
12/28/2020 04:41:26 am

Hi there,

Thanks for sharing the experience. Do you mind to share the mindmap and index as well?

maialelaw@gmail.com

Reply
Hiro
1/4/2021 04:40:52 am

Hi, Thank you very much for the sharing!
Can you share me your mindmap you created for the FOR508 Tools?
Thanks again!

My-e: Hi, Thank you very much for the sharing!
Can you share me your mindmap you created for the FOR508 Tools?
Thanks again!

My-e: 080hiro3point@gmail.com

Reply
komal
2/11/2021 07:22:51 pm

Thanks for sharing the experience. Do you mind to share the mindmap and index as well?

Reply



Leave a Reply.

    Archives

    September 2019
    August 2019
    July 2019
    June 2019
    March 2019
    March 2018

    Categories

    All
    ATA
    Detection
    Forensics
    Microsoft
    Rules
    Windows
    Windows Foreniscs

    RSS Feed