最新的GIAC Red Team Professional - GRTP免費考試真題

A. SQL injection

B. Exploiting weak NTLM authentication

C. Exploiting SMB protocol

D. Kerberoasting

A. They can be used to create backdoors for persistent access.

B. They can be exploited to bypass authentication mechanisms.

C. They increase the size of the Active Directory database, causing performance issues.

D. They may retain access rights that are no longer appropriate or secure.

A. To determine the physical location of a host

B. To find the hostname associated with an IP address

C. To detect the presence of a firewall

D. To identify the services running on a host

A. It enables encrypted data exfiltration

B. It improves the performance of C2 communication

C. It conceals the actual C2 server behind legitimate domains

D. It prevents detection of payloads in transit

A. traceroute

B. SSL certificate parsing

C. ICMP scanning

D. SMB enumeration

A. Changing the team's focus to a different target within the organization

B. Using one compromised system to gain access to another system

C. Rotating log files to hide forensic evidence

D. Shifting the attack vector to exploit a different vulnerability

A. To automate the process of domain registration

B. To reduce the operational costs of maintaining the infrastructure

C. To obfuscate the attack source and complicate traceability

D. To distribute malware payloads more efficiently

A. The compatibility of the exploit with the target's CPU architecture

B. The presence of antivirus or endpoint protection

C. The required time to exploit a given vulnerability

D. The level of noise or detectability associated with the method

A. To distribute malware to target machines

B. To maintain communication with the compromised systems

C. To enhance the encryption of data traffic

D. To serve as a backup server for data storage

A. To maintain stealth and avoid triggering incident response

B. To prevent the payload from being reverse-engineered

C. To conserve bandwidth on the attacker's server

D. To prepare the system for a potential resale on the dark web

A. Testing system availability during stress

B. Validating defensive strategies

C. Identifying unknown vulnerabilities

D. Simulating compliance audits