What is the primary purpose of a red team report?

To list all tools used during the engagement

To provide a timeline of all activities

To provide a detailed account of findings and actionable remediation steps

To justify the cost of the engagement

You are assessing a Kubernetes cluster in a cloud environment. You have obtained read-only access to the cluster's API server. Which action is most likely to lead to code execution in a pod?

Try to access the Kubernetes dashboard using the read-only token.

Check for pods with privileged mode or hostPath mounts that can be exploited.

Scan the cluster's nodes for open ports.

Attempt to create a new pod with a privileged security context.

A red team operator has compromised a cloud environment and wants to maintain access without being detected. The environment has centralized logging enabled, and the security team monitors for unusual API calls. Which technique is most effective for evading detection while maintaining persistence?

Creating a new IAM user with administrative privileges and using it for all future access.

Disabling CloudTrail or equivalent logging to hide all activity.

Using a reverse shell to a public IP address that is not associated with the cloud environment.

Using a legitimate cloud service such as AWS Systems Manager to execute commands on compromised instances.

After completing a cloud red team engagement, the team is preparing the final report. The client's stakeholders include both technical staff and executive leadership. The report must communicate the risk of a publicly accessible storage bucket that was found. Which approach is most effective for the report?

Provide only the technical details of the misconfiguration and the exact commands used to exploit it.

Summarize the finding in a single sentence without technical details to keep the report concise.

Focus on the remediation steps only, without explaining the risk or impact.

Include a technical description of the misconfiguration, the potential impact, and a prioritized remediation plan with business impact.

What is the goal of cloud service enumeration?

To delete all unnecessary cloud resources

To exploit a known vulnerability in a cloud service

To configure cloud services securely

To identify all cloud services and resources in use to discover potential entry points

GIAC Cloud Penetration Tester

Domain 1Objective 2

Red Team Penetration Testing of Cloud Environments GCPN Practice Questions (Page 4)

Part of the Cloud Penetration Testing Fundamentals domain, which makes up ~16% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 4–7 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

11concepts

Questions 16–20

16foundation · easy
What is the primary purpose of a red team report?
Select an answer first
17application · medium
You are assessing a Kubernetes cluster in a cloud environment. You have obtained read-only access to the cluster's API server. Which action is most likely to lead to code execution in a pod?
Select an answer first
18application · medium
A red team operator has compromised a cloud environment and wants to maintain access without being detected. The environment has centralized logging enabled, and the security team monitors for unusual API calls. Which technique is most effective for evading detection while maintaining persistence?
Select an answer first
19application · medium
After completing a cloud red team engagement, the team is preparing the final report. The client's stakeholders include both technical staff and executive leadership. The report must communicate the risk of a publicly accessible storage bucket that was found. Which approach is most effective for the report?
Select an answer first
20foundation · easy
What is the goal of cloud service enumeration?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCPN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCPN” is a trademark of its owner, used for identification only.