GIAC Penetration Tester (GPEN)
Domain 5Objective 1
Azure Overview, Attacks, and AD Integration GPEN Practice Questions (Page 2)
Part of the Cloud and Azure Attacks domain, which makes up ~11% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~8–13 in this domain), expect 4–7 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)
39questions here
8free pages
10concepts
Questions 6–10
- 6
What is a common outcome of an Azure Resource Manager attack where an attacker gains Contributor permissions on a subscription?
Select an answer first - 7
A company has an on-premises Active Directory forest with 10,000 users. They are migrating to Microsoft 365 and want to enable SSO for cloud apps while keeping password changes on-premises authoritative. They also want to minimize the attack surface from password-related attacks. Which authentication method should they configure in Azure AD Connect?
Select an answer first - 8
Which Azure AD attack vector involves an attacker stealing a valid session token to impersonate a user without needing their password?
Select an answer first - 9
How can an attacker move laterally from a compromised Azure AD user account to an Azure VM?
Select an answer first - 10
Which Azure AD feature can be used to require additional verification when a user signs in from an untrusted location or device?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPEN” is a trademark of its owner, used for identification only.