GRTP 無料問題集「GIAC Red Team Professional」

（A）To determine the internet service provider (ISP) used by the organization

（B）To map the organizational structure and employee roles

（C）To assess the organization's software license compliance

（D）To identify potential high-privilege accounts for escalation

（A）Nmap

（B）Cobalt Strike

（C）OpenVAS

（D）Nessus

（A）It replicates directory information to all domain controllers.

（B）It is used to store the global catalog for the forest.

（C）It controls the auditing policies for the entire directory.

（D）It defines the default security descriptor for domain administrators.

（A）To predict the next real-world attack accurately

（B）To create a competitive environment among team members

（C）To enhance the team's understanding of criminal psychology

（D）To simulate realistic threat scenarios based on potential attackers

（A）John the Ripper

（B）Wireshark

（C）Metasploit

（D）Nessus

（A）To plan the lateral movement strategy effectively

（B）To determine the most valuable data assets within the network

（C）To identify which segments are isolated and require physical access

（D）To comply with legal restrictions on penetration testing

（A）They simplify the process of incident response and recovery

（B）They are only necessary for compliance with legal requirements

（C）They help in complying with international cybersecurity standards

（D）They provide a basis for creating more realistic and challenging scenarios

（A）To identify as many vulnerabilities as possible

（B）To audit physical network devices

（C）To test application development procedures

（D）To test the organization's detection and response capabilities

（A）It stores the DNS zones for Active Directory integrated zones.

（B）It acts as a log file that records changes to the Active Directory.

（C）It contains the Active Directory database, including user accounts and passwords.

（D）It is used to store configuration settings for Active Directory Federation Services.

（A）To gain higher-level access to sensitive systems or data

（B）To identify unpatched vulnerabilities

（C）To execute network scanning from an administrative console

（D）To establish an encrypted connection to the server

（A）They increase the size of the Active Directory database, causing performance issues.

（B）They may retain access rights that are no longer appropriate or secure.

（C）They can be exploited to bypass authentication mechanisms.

（D）They can be used to create backdoors for persistent access.

（A）The operating system compatibility

（B）The speed of movement from one system to another

（C）Minimizing the risk of detection

（D）The privileges required for the technique