Which client-side redirection technique uses an HTML meta tag to automatically navigate a browser to another URL after a specified delay?

JavaScript window.location assignment

During an internal penetration test, you need to deliver a credential harvesting script to a target via a phishing email. The email gateway scans attachments for known malware signatures and blocks executable files. Which obfuscation technique would most likely allow the script to bypass the email gateway's signature-based detection?

Encode the script with a custom encoding scheme and decode it at runtime.

Rename the executable file to a .txt extension.

Compress the script into a ZIP file with a password.

Embed the script in a macro within a Word document.

Which scenario best illustrates the integration of redirection and obfuscation in a credential attack?

An attacker uses a direct link to a phishing page that has a valid SSL certificate

An attacker sends a phishing email with a link to a login page that uses a simple password form

A victim clicks a shortened URL that redirects through multiple hops to a phishing page whose script is encoded in Base64

An attacker uses a brute-force tool that rotates user agents

Which security tool behavior is most commonly used to detect redirection-based attacks?

Blocking all HTTP 3xx status codes

Following all redirects and inspecting the final URL

Ignoring JavaScript-based redirects

Only checking the domain of the initial URL

Why might an attacker use an open redirect on a trusted domain as part of a credential harvesting attack?

To encrypt the credentials in transit

To avoid the need for a phishing page altogether

To make the malicious link appear to be on a trusted domain, increasing the likelihood the victim clicks it

To bypass SSL/TLS encryption on the phishing page

GIAC Cloud Penetration Tester

Domain 6Objective 2

Redirection and Attack Obfuscation GCPN Practice Questions (Page 2)

Part of the Credential Attacks and Evasion domain, which makes up ~15% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 4–6 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

8concepts

Questions 6–10

6foundation · easy
Which client-side redirection technique uses an HTML meta tag to automatically navigate a browser to another URL after a specified delay?
Select an answer first
7application · medium
During an internal penetration test, you need to deliver a credential harvesting script to a target via a phishing email. The email gateway scans attachments for known malware signatures and blocks executable files. Which obfuscation technique would most likely allow the script to bypass the email gateway's signature-based detection?
Select an answer first
8foundation · easy
Which scenario best illustrates the integration of redirection and obfuscation in a credential attack?
Select an answer first
9foundation · easy
Which security tool behavior is most commonly used to detect redirection-based attacks?
Select an answer first
10foundation · easy
Why might an attacker use an open redirect on a trusted domain as part of a credential harvesting attack?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCPN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCPN” is a trademark of its owner, used for identification only.