We're so confident of our products that we provide no hassle product exchange.
GIAC GRTP Exam Overview:
| Certification Vendor: | GIAC |
|---|---|
| Exam Name: | GIAC Red Team Professional |
| Exam Number: | GRTP |
| Certificate Validity Period: | 4 years |
| Passing Score: | 76% |
| Exam Format: | CyberLive Hands-on Lab, Multiple Choice |
| Exam Price: | $999 USD |
| Real Exam Qty: | 75-82 |
| Related Certifications: | SEC565: Red Team Operations and Adversary Emulation |
| Exam Duration: | 120-180 |
| Available Languages: | English |
| Sample Questions: | GIAC GRTP Sample Questions |
| Exam Way: | Online or onsite proctored exam with CyberLive hands-on testing. |
| Pre Condition: | No formal prerequisite required, but knowledge of penetration testing, Active Directory, and offensive security operations is recommended. |
| Official Syllabus URL: | https://www.giac.org/certifications/red-team-professional-grtp/ |
GIAC GRTP Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Persistence and Exfiltration | - Persistence Techniques
|
| Active Directory Attacks | - Privilege Escalation
|
| Attack Infrastructure | - Infrastructure Development
|
| Reconnaissance and Initial Access | - Target Discovery
|
| Network and Active Directory Operations | - Enumeration and Lateral Movement
|
| Reporting and Presentation | - Engagement Closure
|
| Adversary Emulation Planning | - Threat Intelligence Gathering
|
| Defense Evasion | - Bypass Techniques
|
GIAC Red Team Professional Sample Questions:
Question #1
Which attack method targets improperly configured sudo privileges to escalate access on a Linux system?
Response:
- A. Pass-the-Hash
- B. SQL injection
- C. Kerberoasting
- D. Sudo exploitation
Correct Answer: D 🗳️
Question #2
Adversary emulation differs from penetration testing primarily in that it:
Response:
- A. Is typically performed without any prior knowledge of the environment
- B. Emulates an adversary's actions based on real-world incidents and TTPs
- C. Focuses solely on the exploitation of physical security controls
- D. Is an unstructured approach to identifying vulnerabilities
Correct Answer: B 🗳️
Question #3
What is the primary purpose of using a domain generation algorithm (DGA) in creating an attack infrastructure?
Response:
- A. To increase the speed of the network reconnaissance
- B. To improve the efficiency of brute-force attacks
- C. To generate a large number of domain names for command and control servers
- D. To automate the encryption of malicious payloads
Correct Answer: C 🗳️
Question #4
Which tool or method can be used to enumerate shared resources on a Windows network?
Response:
- A. ICMP scanning
- B. SSL certificate parsing
- C. traceroute
- D. SMB enumeration
Correct Answer: D 🗳️
Question #5
What are effective methods for staging data for exfiltration?
Multiple Correct Answers
Response:
- A. Segmenting the data into smaller, less detectable portions
- B. Creating multiple copies of the data across the network
- C. Uploading the data to a public cloud storage service
- D. Compressing and encrypting the data to avoid detection
Correct Answer: A,D 🗳️
Viewing page 1 out of 31 pages.
Viewing questions 1-5 out of 152 questions.
By Prima
