GIAC Red Team Professional 認定 GRTP 試験問題:

1. What is the primary purpose of lateral movement within a network?
Response:

A) To establish a persistent backdoor in the network
B) To gain access to additional systems and expand control within the environment
C) To cause a denial of service in the network infrastructure
D) To exfiltrate all data immediately from the compromised host

2. What are the implications of a successful Active Directory Federation Services (AD FS) compromise?
Multiple Correct Answers
Response:

A) Ability to modify domain-wide Group Policy Objects
B) Elevation of privileges within the AD FS server
C) Unauthorized access to multiple web applications
D) Single sign-on (SSO) token manipulation

3. What are effective methods for staging data for exfiltration?
Multiple Correct Answers
Response:

A) Uploading the data to a public cloud storage service
B) Creating multiple copies of the data across the network
C) Segmenting the data into smaller, less detectable portions
D) Compressing and encrypting the data to avoid detection

4. What techniques are utilized for maintaining access within a domain?
Multiple Correct Answers
Response:

A) Regularly updating software and patches on compromised systems
B) Deploying additional backdoors on strategic systems
C) Conducting periodic reconnaissance to find new targets
D) Establishing covert channels

5. What is the purpose of obfuscating a malicious payload?
Response:

A) To make the payload easier to understand for the attacker
B) To bypass security mechanisms and avoid detection
C) To increase the size of the payload
D) To comply with industry best practices

質問と回答：