GIAC Penetration Tester (GPEN)
Domain 2Objective 4
Command and Control (C2) GPEN Practice Questions (Page 1)
Part of the Exploitation and Post-Exploitation domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–26 in this domain), expect 4–7 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)
35questions here
7free pages
7concepts
Questions 1–5
- 1
Which of the following is a common step when setting up a basic C2 server?
Select an answer first - 2
Which tool is commonly used to generate a C2 payload for a Windows target?
Select an answer first - 3
A penetration tester is evaluating C2 frameworks for an engagement that requires the ability to generate payloads for Windows, Linux, and macOS, and to perform post-exploitation actions like file upload/download and command execution. Which framework is best suited?
Select an answer first - 4
A penetration tester has compromised a Windows server and wants to use the C2 framework to dump credentials and then use those credentials to access other machines. Which C2 module would be most appropriate for this task?
Select an answer first - 5
Which C2 module is used to maintain access to a compromised host across reboots?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPEN” is a trademark of its owner, used for identification only.