GRTP by GIAC Actual Free Exam Q&As

Question 1

In the context of privilege escalation on a Linux system, what is the significance of the SUID bit?
Response:

A. It makes the file invisible to other users. B. It encrypts the file contents automatically. C. It logs the execution details for security auditing. D. It sets the script or program to execute as the owner with the owner's privileges.

Discussion 0

Correct Answer: D Vote an answer

Question 2

Which attributes are commonly targeted during privilege escalation in Active Directory attacks?
(Choose two)
Response:

A. User profile paths B. Group memberships C. Security Identifiers (SIDs) D. Service Principal Names (SPNs)

Discussion 0

Correct Answer: B,D Vote an answer

Question 3

In the context of adversary emulation, what does TTP stand for?
Response:

A. Tools, Techniques, and Practices B. Techniques, Threats, and Procedures C. Tactics, Techniques, and Procedures D. Threats, Tactics, and Protocols

Discussion 0

Correct Answer: C Vote an answer

Question 4

Which Linux file contains user privilege information that is crucial for an attacker to understand the privilege landscape of the system?
Response:

A. /etc/hosts B. /var/log/auth.log C. /etc/shadow D. /etc/passwd

Discussion 0

Correct Answer: D Vote an answer

Question 5

What is the purpose of performing Pass-the-Hash (PtH) attacks in a domain environment?
Response:

A. To identify unpatched systems B. To authenticate without knowing the plaintext password C. To exploit weak passwords D. To sniff network traffic

Discussion 0

Correct Answer: B Vote an answer

Question 6

What should be included in the red team's engagement report?
(Choose two)
Response:

A. A list of vulnerabilities exploited B. A detailed timeline of the attack execution C. Recommendations for mitigating identified risks D. Security tool versions used by the blue team

Discussion 0

Correct Answer: A,C Vote an answer

Question 7

In the context of delivering a malicious payload, what does 'spear phishing' refer to?
Response:

A. Broadcasting the payload over an open Wi-Fi network B. Directly installing the payload on the target machine via physical access C. A broad, untargeted phishing campaign D. A targeted attack that involves sending emails to specific individuals

Discussion 0

Correct Answer: D Vote an answer

Question 8

Which pieces of information are crucial when performing network discovery?
Multiple Correct Answers
Response:

A. Physical location of network devices B. Operating systems and versions C. Installed software and services D. Active hosts on the network

Discussion 0

Correct Answer: B,C,D Vote an answer

Question 9

Which tool is known for its extensive use in post-exploitation scenarios within a C2 context?
Response:

A. Nmap B. Metasploit C. Empire D. Nessus

Discussion 0

Correct Answer: C Vote an answer

Question 10

What are effective methods for staging data for exfiltration?
Multiple Correct Answers
Response:

A. Segmenting the data into smaller, less detectable portions B. Compressing and encrypting the data to avoid detection C. Uploading the data to a public cloud storage service D. Creating multiple copies of the data across the network

Discussion 0

Correct Answer: A,B Vote an answer

Question 11

How can an attacker leverage scheduled tasks for persistence?
Response:

A. By deleting all scheduled tasks to cover tracks B. By scheduling legitimate system updates to gain user trust C. By scheduling system reboots to disrupt user activity D. By creating tasks that initiate the attacker's payload at system startup or at a specified time

Discussion 0

Correct Answer: D Vote an answer

Question 12

What tool is typically used to perform a Pass-the-Ticket attack in an Active Directory environment?
Response:

A. Wireshark B. Mimikatz C. Nmap D. BloodHound

Discussion 0

Correct Answer: B Vote an answer

Question 13

What tool is typically used to perform a Pass-the-Ticket attack in an Active Directory environment?
Response:

A. Wireshark B. Mimikatz C. Nmap D. BloodHound

Discussion 0

Correct Answer: B Vote an answer

Question 14

Which entities benefit the most from adversary emulation exercises?
Multiple Correct Answers
Response:

A. Security operations centers (SOCs) B. Executive management C. Incident response teams D. Marketing departments

Discussion 0

Correct Answer: A,C Vote an answer

GIAC Red Team Professional - GRTP Exam Practice Test