A red team operator is setting up C2 infrastructure and wants to protect the identity of the team server. The operator plans to use redirectors. Which setup is most effective for this purpose?

Place a redirector on a VPS that forwards traffic to the team server over a VPN tunnel.

Use a CDN to proxy traffic directly to the team server without a separate redirector.

Use a single VPS that runs both the redirector and the team server.

Use a domain that points directly to the team server's IP.

Why is it important to use unique C2 infrastructure for different engagements?

To avoid linking separate operations to the same infrastructure.

To reduce the cost of the C2 server.

To comply with legal requirements.

After gaining initial access to a Windows workstation, a penetration tester wants to use the C2 framework to move laterally to a server using a stolen credential. The tester needs to execute a command on the remote server without creating a new service or writing a file. Which C2 module or technique is most appropriate?

Use WMI to execute a process on the remote server with the stolen credential.

Use RDP to log in and manually run the command.

Use the 'psexec' module with the stolen credential to execute a command remotely.

Use SMB to copy a payload to the remote server and schedule a task to run it.

An assessor is setting up a C2 server for a penetration test and wants to reduce the risk of the infrastructure being taken down by a takedown or sinkhole. The assessor has a limited budget and needs to maintain a stable listener. Which infrastructure choice is most appropriate?

Rely on a single cloud instance with a public IP and no backup.

Use a dedicated VPS with a static IP and register a domain that is not associated with the assessment.

Use a free dynamic DNS service and a home internet connection.

Use a domain with multiple A records pointing to different VPS providers in different jurisdictions.

GIAC Penetration Tester (GPEN)

Domain 2Objective 4

Command and Control (C2) GPEN Practice Questions (Page 3)

Part of the Exploitation and Post-Exploitation domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–26 in this domain), expect 4–7 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

7concepts

Questions 11–15

11foundation · easy
Which of the following protocols can be used to tunnel C2 traffic and is known for being able to blend in with normal web traffic?
Select an answer first
12application · medium
A red team operator is setting up C2 infrastructure and wants to protect the identity of the team server. The operator plans to use redirectors. Which setup is most effective for this purpose?
Select an answer first
13foundation · easy
Why is it important to use unique C2 infrastructure for different engagements?
Select an answer first
14application · medium
After gaining initial access to a Windows workstation, a penetration tester wants to use the C2 framework to move laterally to a server using a stolen credential. The tester needs to execute a command on the remote server without creating a new service or writing a file. Which C2 module or technique is most appropriate?
Select an answer first
15application · medium
An assessor is setting up a C2 server for a penetration test and wants to reduce the risk of the infrastructure being taken down by a takedown or sinkhole. The assessor has a limited budget and needs to maintain a stable listener. Which infrastructure choice is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GPEN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPEN” is a trademark of its owner, used for identification only.

Command and Control (C2) GPEN Practice Questions (Page 3)

Questions 11–15

Which of the following protocols can be used to tunnel C2 traffic and is known for being able to blend in with normal web traffic?

A red team operator is setting up C2 infrastructure and wants to protect the identity of the team server. The operator plans to use redirectors. Which setup is most effective for this purpose?

Why is it important to use unique C2 infrastructure for different engagements?

An assessor is setting up a C2 server for a penetration test and wants to reduce the risk of the infrastructure being taken down by a takedown or sinkhole. The assessor has a limited budget and needs to maintain a stable listener. Which infrastructure choice is most appropriate?

Keep studying — Exploitation and Post-Exploitation