[2026] GIAC Red Team Professional - GRTP 무료 시험 문제

문제1

Which key aspects are typically addressed in adversary emulation exercises?
(Choose two)
Response:

A. Vulnerability assessment across all systems

B. Detection and response capabilities

C. Application development lifecycle

D. Incident response processes

정답: B,D

문제2

What are effective methods for achieving lateral movement within a network?
Multiple Correct Answers
Response:

A. Exploiting vulnerabilities in network services

B. Man-in-the-middle attacks to intercept data

C. Pass-the-hash technique to authenticate to other systems

D. Using social engineering to obtain additional credentials

정답: A,C

문제3

What is the advantage of using domain fronting in C2 infrastructure?
Response:

A. It conceals the actual C2 server behind legitimate domains

B. It enables encrypted data exfiltration

C. It improves the performance of C2 communication

D. It prevents detection of payloads in transit

정답: A

문제4

What considerations must be taken into account when exfiltrating data to avoid detection?
Multiple Correct Answers
Response:

A. Posting data publicly to deflect suspicion

B. The volume of data being exfiltrated at any one time

C. Timing of the exfiltration to coincide with high network traffic periods

D. The use of common network ports and protocols to blend in with normal traffic

정답: C,D

문제5

Which of the following tools is commonly used to establish a C2 infrastructure in red team engagements?
Response:

A. Nessus

B. Cobalt Strike

C. Nmap

D. OpenVAS

정답: B

문제6

In the context of persistence, what is the purpose of creating a hidden user account on the compromised system?
Response:

A. To ensure the attacker can regain access even if other accounts are discovered or removed

B. To facilitate remote support and troubleshooting

C. To provide an account for guest users

D. To enable the legitimate users to have enhanced privileges

정답: A

문제7

Why is it important to use both direct and indirect C2 channels in an attack infrastructure?
Response:

A. To facilitate the segmentation of the compromised network

B. To ensure redundancy in case one communication channel is detected or disrupted

C. To comply with international cyber warfare conventions

D. To provide different bandwidth options for data exfiltration

정답: B

문제8

During the reporting phase of a red team engagement, which of the following should be highlighted in the final report?
Response:

A. The IP addresses of all scanned systems

B. The number of failed exploits

C. The configuration of security tools

D. The specific vulnerabilities found

정답: D

문제9

In the context of C2 frameworks, what is 'jitter' used for?
Response:

A. To randomize the timing of network communications and evade detection

B. To generate random domain names for the C2 infrastructure

C. To increase the speed of data transfer to the C2 server

D. To encrypt the data being exfiltrated

정답: A

문제10

What are common evasion techniques used in command and control operations to avoid detection?
Multiple Correct Answers
Response:

A. Use of legitimate websites for data exfiltration

B. Encryption of C2 traffic

C. Frequent changing of payload signatures

D. Rapid rotation of IP addresses

정답: A,B,C

문제11

What are the main reasons for using adversary emulation in red team operations?
(Choose two)
Response:

A. Simulating compliance audits

B. Identifying unknown vulnerabilities

C. Validating defensive strategies

D. Testing system availability during stress

정답: B,C

문제12

After revealing the red team's actions, what are critical next steps?
Multiple Correct Answers
Response:

A. Planning for immediate re-engagement without addressing discovered issues

B. Discussing the findings with the relevant stakeholders

C. Determining the necessity and scope of any follow-up assessments

D. Ignoring any feedback from the target organization's personnel

정답: B,C

문제13

Which of the following is a key factor to consider during the planning phase of a red team engagement?
Response:

A. The security toolset used by the blue team

B. Determining the method of communication between red team members

C. Identifying known vulnerabilities

D. Documenting the timeline and key milestones for the engagement

정답: D

문제14

What should be included in a comprehensive red team engagement report?
Response:

A. The red team's personal opinions on company culture

B. Marketing strategies for the organization

C. Names of employees who failed the security tests

D. Detailed descriptions of the exploited vulnerabilities

정답: D

GIAC Red Team Professional - GRTP무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트