A red teamer has compromised an Azure VM and wants to maintain access without being detected by Azure Security Center or Azure Monitor. Which technique is most effective for evading detection?

Modify the VM's network security group to allow inbound RDP from your IP.

Use a reverse shell to an external server and keep the connection alive.

Disable the Azure Monitor agent and delete the associated diagnostic settings.

Create a new user account and add it to the local Administrators group.

GIAC Cloud Penetration Tester

Domain 1Objective 2

Red Team Penetration Testing of Cloud Environments GCPN Practice Questions (Page 10)

Part of the Cloud Penetration Testing Fundamentals domain, which makes up ~16% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 4–7 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

11concepts

Questions 46–46

46application · medium
A red teamer has compromised an Azure VM and wants to maintain access without being detected by Azure Security Center or Azure Monitor. Which technique is most effective for evading detection?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GCPN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCPN” is a trademark of its owner, used for identification only.

Red Team Penetration Testing of Cloud Environments GCPN Practice Questions (Page 10)

Questions 46–46

A red teamer has compromised an Azure VM and wants to maintain access without being detected by Azure Security Center or Azure Monitor. Which technique is most effective for evading detection?

Keep studying — Cloud Penetration Testing Fundamentals