GRTP Exam Training Practice Tests (GIAC Red Team Professional)]

Question 1

Why is it critical to maintain stealth and avoid detection during the privilege escalation process?
Response:

A. To avoid forensic analysis that could lead to attacker identification B. To allow time for lateral movement within the network C. To ensure that escalated privileges can be maintained for future access D. To prevent triggering network-wide lockdown procedures

Correct Answer: C

Question 2

Which tool is known for its extensive use in post-exploitation scenarios within a C2 context?
Response:

A. Empire B. Nessus C. Nmap D. Metasploit

Correct Answer: A

Question 3

What are the main reasons for using adversary emulation in red team operations?
(Choose two)
Response:

A. Simulating compliance audits B. Validating defensive strategies C. Testing system availability during stress D. Identifying unknown vulnerabilities

Correct Answer: B,D

Question 4

What is the role of DNS in attack infrastructure?
Response:

A. To scan for open ports B. To monitor all internal traffic C. To encrypt outbound communications D. To resolve C2 server IP addresses for communicating with compromised hosts

Correct Answer: D

Question 5

Which of the following is an effective method for ensuring the delivery of a malicious payload via email?
Response:

A. Using a well-known sender's email address B. Crafting the email to appear as a legitimate and urgent request C. Sending the email to as many recipients as possible within the organization D. Attaching a large file to avoid detection

Correct Answer: B

Question 6

In creating an attack infrastructure, what is the significance of 'redirection' through proxy servers?
Response:

A. To obfuscate the attack source and complicate traceability B. To reduce the operational costs of maintaining the infrastructure C. To automate the process of domain registration D. To distribute malware payloads more efficiently

Correct Answer: A

Question 7

What tool is typically used to perform a Pass-the-Ticket attack in an Active Directory environment?
Response:

A. BloodHound B. Mimikatz C. Nmap D. Wireshark

Correct Answer: B

Question 8

In network discovery, which types of information are typically gathered using SNMP enumeration?
(Choose two)
Response:

A. Network device types and roles B. Network interface and routing information C. Usernames and passwords D. Running services and processes

Correct Answer: A,B

Question 9

Which Linux file contains user privilege information that is crucial for an attacker to understand the privilege landscape of the system?
Response:

A. /etc/passwd B. /etc/shadow C. /var/log/auth.log D. /etc/hosts

Correct Answer: A

Question 10

Which of the following attacks can be used to escalate privileges in an Active Directory environment?
Multiple Correct Answers
Response:

A. Kerberoasting B. DNS spoofing C. Pass-the-Hash attack D. ARP poisoning

Correct Answer: A,C

Question 11

Which two techniques can be used to escalate privileges in a Windows environment?
(Choose two)
Response:

A. Kerberoasting B. Exploiting SMB protocol C. Exploiting weak NTLM authentication D. SQL injection

Correct Answer: A,C

Question 12

Adversary emulation differs from penetration testing primarily in that it:
Response:

A. Emulates an adversary's actions based on real-world incidents and TTPs B. Is typically performed without any prior knowledge of the environment C. Focuses solely on the exploitation of physical security controls D. Is an unstructured approach to identifying vulnerabilities

Correct Answer: A

Question 13

Which one of the following is NOT a phase in the Cyber Kill Chain framework?
Response:

A. Virtualization B. Reconnaissance C. Weaponization D. Installation

Correct Answer: A

Question 14

Which tool is commonly used for lateral movement in Windows environments?
Response:

A. Nmap B. PsExec C. OpenSSL D. Wireshark

Correct Answer: B

GIAC Red Team Professional - GRTP Exam Practice Test