GRTP by GIAC Valid Free Exam Practice Test

Question 1

What considerations must be taken into account when exfiltrating data to avoid detection?
Multiple Correct Answers
Response:

A. Posting data publicly to deflect suspicion B. The use of common network ports and protocols to blend in with normal traffic C. The volume of data being exfiltrated at any one time D. Timing of the exfiltration to coincide with high network traffic periods

Correct Answer: B,D

Question 2

In the context of attack infrastructure, what is 'pivoting'?
Response:

A. Redirecting phishing emails to a different target audience B. Rotating cryptographic keys to secure command and control communication C. Changing the attack vector to exploit different vulnerabilities D. Using a compromised system to gain access to other systems in the network

Correct Answer: D

Question 3

After gaining initial access, what are the key next steps an attacker should take?
Multiple Correct Answers
Response:

A. Immediately exfiltrating all accessible data B. Conducting further reconnaissance within the network C. Establishing persistence in the system D. Strengthening the security of the system to lock out other potential attackers

Correct Answer: B,C

Question 4

In the context of discovery, what is the purpose of a reverse DNS lookup?
Response:

A. To identify the services running on a host B. To determine the physical location of a host C. To find the hostname associated with an IP address D. To detect the presence of a firewall

Correct Answer: C

Question 5

Which tool is known for its extensive use in post-exploitation scenarios within a C2 context?
Response:

A. Nmap B. Empire C. Nessus D. Metasploit

Correct Answer: B

Question 6

In Active Directory, what is the significance of the AdminSDHolder object?
Response:

A. It controls the auditing policies for the entire directory. B. It is used to store the global catalog for the forest. C. It defines the default security descriptor for domain administrators. D. It replicates directory information to all domain controllers.

Correct Answer: C

Question 7

What is the primary goal of a Kerberoasting attack in Active Directory?
Response:

A. To escalate privileges by cracking service account passwords B. To perform network reconnaissance C. To capture and decrypt user traffic D. To gain direct access to the domain controller

Correct Answer: A

Question 8

What is the purpose of using "let's encrypt" in setting up an adversary domain?
Response:

A. To encrypt DNS queries and responses B. To generate and manage free SSL/TLS certificates for HTTPS encryption C. To provide secure shell access to compromised systems D. To create secure email servers for phishing campaigns

Correct Answer: B

Question 9

Which two techniques are commonly used to achieve persistence on a compromised Linux system?
(Choose two)
Response:

A. Disabling SELinux B. SSH key injection C. Using registry keys D. Modifying the crontab

Correct Answer: B,D

Question 10

Which components are essential when setting up a resilient adversary infrastructure?
Multiple Correct Answers
Response:

A. Redundant C2 servers in different geographical locations B. A single static IP address for simplicity C. Use of common port numbers (80, 443) for C2 communication D. Multiple domain names with fast-flux DNS

Correct Answer: A,C,D

GIAC Red Team Professional - GRTP Exam Practice Test