What is the primary purpose of using a redirect chain (multiple sequential redirects) in an attack payload?

To make it harder for security tools and analysts to identify the final malicious destination

To ensure the victim's browser uses HTTPS for all requests

To increase the page load speed for the victim

To reduce the number of requests sent to the phishing server

You are designing a phishing campaign that uses a redirection chain to evade detection. The chain must be resilient to URL reputation services that block known malicious domains. Which chain design is most effective?

Use a meta refresh on a legitimate page that redirects to the harvesting page

Use a URL shortener that points directly to the harvesting page

Use a single redirect from a compromised legitimate domain to the harvesting page

Use a chain of multiple redirects through different compromised domains

You are developing a credential-harvesting tool that must evade antivirus detection on the victim's machine. The tool downloads a payload from a remote server and executes it in memory. Which obfuscation approach is most effective for evading signature-based antivirus?

Encode the payload with base64 and decode at runtime

Use a polymorphic encoder that changes the payload's signature each time it is downloaded

Use a simple XOR encryption with a static key

Store the payload in a text file on disk

What is the primary purpose of attack obfuscation in the context of credential attacks?

To ensure the attack works only on a specific operating system

To make the attack payload more efficient in terms of network bandwidth

To speed up the credential brute-forcing process

To hide the malicious nature of the attack from security controls and analysts

Which of the following is an example of attack obfuscation?

Using a strong password for the attacker's account

Using a VPN to hide the attacker's IP address

Increasing the timeout on a web request

Encoding a malicious script in Base64

GIAC Cloud Penetration Tester

Domain 6Objective 2

Redirection and Attack Obfuscation GCPN Practice Questions (Page 4)

Part of the Credential Attacks and Evasion domain, which makes up ~15% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 4–6 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

8concepts

Questions 16–20

16foundation · easy
What is the primary purpose of using a redirect chain (multiple sequential redirects) in an attack payload?
Select an answer first
17application · medium
You are designing a phishing campaign that uses a redirection chain to evade detection. The chain must be resilient to URL reputation services that block known malicious domains. Which chain design is most effective?
Select an answer first
18application · medium
You are developing a credential-harvesting tool that must evade antivirus detection on the victim's machine. The tool downloads a payload from a remote server and executes it in memory. Which obfuscation approach is most effective for evading signature-based antivirus?
Select an answer first
19foundation · easy
What is the primary purpose of attack obfuscation in the context of credential attacks?
Select an answer first
20foundation · easy
Which of the following is an example of attack obfuscation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCPN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCPN” is a trademark of its owner, used for identification only.