How does defense in depth help limit the impact of a successful exploit?

By providing multiple barriers that an attacker must bypass, increasing the chance of detection and reducing the scope of compromise

By ensuring that all vulnerabilities are patched immediately

By preventing any attacker from ever gaining initial access

By encrypting all data so that it is unreadable to attackers

During a red team exercise, an analyst needs to simulate an attacker who gains initial access by exploiting a known vulnerability in a web application and then establishes a persistent remote shell. Which combination of tools would best match this scenario?

Metasploit Framework for the exploit and a Meterpreter payload for the remote shell.

Burp Suite for the exploit and a keylogger for the remote shell.

John the Ripper for the exploit and netcat for the remote shell.

Nmap for the exploit and Wireshark for the remote shell.

A company has a legacy application that is critical to operations and cannot be patched for six months. The application is known to have a privilege escalation vulnerability. The security team must implement a mitigation that reduces the risk of exploitation while maintaining the application's availability. Which combination of controls would best achieve this?

Grant the application full administrative privileges to improve performance.

Run the application with the least privilege necessary and monitor for unusual privilege escalation attempts.

Move the application to a different server with more resources.

Disable the application until the patch is available.

GIAC Foundational Cybersecurity Technologies

Domain 6Objective 1

Exploitation & Mitigation GFACT Practice Questions (Page 9)

Part of the Offensive Security and Defense domain, which makes up ~25% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 7–10 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

7concepts

Questions 41–45

41foundation · easy
How does defense in depth help limit the impact of a successful exploit?
Select an answer first
42application · medium
During a red team exercise, an analyst needs to simulate an attacker who gains initial access by exploiting a known vulnerability in a web application and then establishes a persistent remote shell. Which combination of tools would best match this scenario?
Select an answer first
43foundation · easy
In the typical exploit lifecycle, which stage immediately follows the delivery of a malicious payload to the target system?
Select an answer first
44expert · hard
A company has a legacy application that is critical to operations and cannot be patched for six months. The application is known to have a privilege escalation vulnerability. The security team must implement a mitigation that reduces the risk of exploitation while maintaining the application's availability. Which combination of controls would best achieve this?
Select an answer first
45foundation · easy
During which stage of the exploit lifecycle does an attacker gather information about the target, such as open ports, operating system, and potential vulnerabilities?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GFACT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GFACT” is a trademark of its owner, used for identification only.

Exploitation & Mitigation GFACT Practice Questions (Page 9)

Questions 41–45

How does defense in depth help limit the impact of a successful exploit?

During a red team exercise, an analyst needs to simulate an attacker who gains initial access by exploiting a known vulnerability in a web application and then establishes a persistent remote shell. Which combination of tools would best match this scenario?

In the typical exploit lifecycle, which stage immediately follows the delivery of a malicious payload to the target system?

During which stage of the exploit lifecycle does an attacker gather information about the target, such as open ports, operating system, and potential vulnerabilities?

Keep studying — Offensive Security and Defense