Integrating LLMs with Offensive Operations GCIH Practice Questions (Page 7)

Questions 31–32

1. 31expert · hard

   A red-team operator is building an autonomous agent that uses an LLM to perform reconnaissance and generate phishing emails. The agent must operate within a strict time budget and avoid detection. The operator has two options: use a single LLM API with a plugin for web search, or use a multi-agent system where one agent does recon and another generates emails. Which factor is most important when choosing between these approaches?

   • AThe LLM's ability to generate human-like text.
   • BThe number of API calls required and the associated latency.
   • CThe LLM's training data cutoff date.
   • DThe cost per API call.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A penetration tester is automating reconnaissance for a client engagement. The tester wants to use an LLM to analyze public web pages and extract employee names, email formats, and technology stack details. Which integration approach is most effective for this task?

   • AAsk the LLM to generate a list of common employee names and email patterns without accessing the target's website.
   • BUse the LLM to write a script that scrapes the website, but do not use the LLM to analyze the scraped data.
   • CUse an LLM API with a web-scraping plugin that can fetch pages and then prompt the LLM to extract structured data (names, emails, tech stack) into a JSON format.
   • DFeed the LLM a list of URLs and ask it to summarize the content, then manually extract the details.
   Reveal Solution Discussion Select an answer first