A red team is using a redirector that forwards HTTPS traffic to a C2 server. The C2 server's certificate is not trusted by the redirector, causing the redirector to drop the connection. The team needs to fix this while maintaining security. Which action is most appropriate?

Use a self-signed certificate on the redirector

Disable TLS verification on the redirector

Change the C2 server to use HTTP

Install the C2 server's certificate on the redirector as a trusted root

A red team is concerned about their C2 infrastructure being sinkholed by defenders. They want to make it resilient against takedown while maintaining operational security. Which approach best supports this goal?

Use domains that are registered with the team's real identity to avoid suspicion

Use only free hosting services to reduce cost

Use multiple domains and redirectors that can be swapped if one is sinkholed

Use a single domain and rely on a single high-availability VPS

Why is it important to use valid TLS certificates on attack infrastructure?

To encrypt the data stored on the C2 server's hard drive

To ensure the C2 server is protected from malware infections

To make the infrastructure appear more legitimate and avoid certificate warnings

To allow the C2 server to bypass firewall rules

What is the role of DNS in supporting attack infrastructure?

To block malicious traffic from reaching the C2 server

To encrypt communications between the C2 server and the target

To provide a flexible and resilient way to direct traffic to different servers

To store the C2 server's private keys securely

A red team needs to host a phishing site that looks legitimate. They have a domain and a VPS. Which hosting and DNS configuration is most appropriate to avoid detection and maintain availability?

Use a reputable hosting provider and configure DNS with a short TTL for quick changes

Use a domain that is similar to the target's domain and host on a cheap VPS

Use a free hosting service and a long TTL to reduce DNS queries

Host the site on the same server as the C2 server and use a long TTL

GIAC Red Team Professional

Domain 1Objective 3

Creating the Attack Infrastructure GRTP Practice Questions (Page 3)

Part of the Red Team Operations and Infrastructure domain, which makes up ~38% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~27–46 in this domain), expect 7–12 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

7concepts

Questions 11–15

11expert · hard
A red team is using a redirector that forwards HTTPS traffic to a C2 server. The C2 server's certificate is not trusted by the redirector, causing the redirector to drop the connection. The team needs to fix this while maintaining security. Which action is most appropriate?
Select an answer first
12application · medium
A red team is concerned about their C2 infrastructure being sinkholed by defenders. They want to make it resilient against takedown while maintaining operational security. Which approach best supports this goal?
Select an answer first
13foundation · easy
Why is it important to use valid TLS certificates on attack infrastructure?
Select an answer first
14foundation · easy
What is the role of DNS in supporting attack infrastructure?
Select an answer first
15application · medium
A red team needs to host a phishing site that looks legitimate. They have a domain and a VPS. Which hosting and DNS configuration is most appropriate to avoid detection and maintain availability?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GRTP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GRTP” is a trademark of its owner, used for identification only.