You have compromised an account that has permission to create and link Group Policy Objects (GPOs) to an organizational unit (OU) containing high-value servers. You want to execute a command on those servers as SYSTEM. Which technique should you use?

Use the GPO to configure a firewall rule to allow inbound RDP, then connect to the servers with your current credentials.

Create a new GPO that adds a scheduled task or startup script to run your payload, then link it to the target OU.

Use the GPO to disable Windows Defender on the target servers, then use a separate exploit to gain code execution.

Use the GPO to modify the local administrator password on the target servers via a restricted group policy.

GIAC Red Team Professional

Domain 3Objective 1

Attacking Active Directory GRTP Practice Questions (Page 13)

Part of the Active Directory Attacks and Post-Exploitation domain, which makes up ~33% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~23–40 in this domain), expect 8–13 from this objective — we provide 61 practice questions to prepare you well beyond it. (estimate)

61questions here

13free pages

19concepts

Questions 61–61

61application · medium
You have compromised an account that has permission to create and link Group Policy Objects (GPOs) to an organizational unit (OU) containing high-value servers. You want to execute a command on those servers as SYSTEM. Which technique should you use?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GRTP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GRTP” is a trademark of its owner, used for identification only.

Attacking Active Directory GRTP Practice Questions (Page 13)

Questions 61–61

You have compromised an account that has permission to create and link Group Policy Objects (GPOs) to an organizational unit (OU) containing high-value servers. You want to execute a command on those servers as SYSTEM. Which technique should you use?

Keep studying — Active Directory Attacks and Post-Exploitation