A red team engagement targets a mature organization with egress filtering that only allows outbound HTTPS to known domains. The team needs a C2 framework that blends with normal web traffic and supports multiple redirectors. Which framework choice best meets these constraints?

A framework that uses raw TCP beacons on non-standard ports

A framework that only supports HTTP on port 80

A framework that relies on DNS tunneling for all communication

A framework that supports HTTPS listeners and domain fronting

During the planning phase of a red team engagement, what is the primary purpose of defining attack infrastructure requirements?

To ensure the infrastructure aligns with the engagement scope, rules of engagement, and operational objectives

To select the most advanced C2 framework available

To minimize the total cost of all infrastructure components

To guarantee the infrastructure will remain undetected by all defensive measures

Which of the following is a common technique used by redirectors to make traffic appear legitimate?

Forwarding all traffic to the C2 server regardless of content

Responding to non-C2 requests with a generic error page

Using domain fronting to route traffic through a legitimate CDN

Blocking all HTTPS traffic to avoid inspection

What is the primary purpose of a redirector in attack infrastructure?

To encrypt all traffic between the red team and the target

To store logs of all target interactions

To hide the true location of the C2 server from the target network

To increase the speed of C2 communications

When selecting a C2 framework for a red team engagement, which factor is most important to consider?

The framework's cost and licensing model

The framework's ability to generate reports automatically

The framework's popularity among other red teams

The framework's compatibility with the target environment and the engagement's operational requirements

GIAC Red Team Professional

Domain 1Objective 3

Creating the Attack Infrastructure GRTP Practice Questions (Page 6)

Part of the Red Team Operations and Infrastructure domain, which makes up ~38% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~27–46 in this domain), expect 7–12 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

7concepts

Questions 26–30

26application · medium
A red team engagement targets a mature organization with egress filtering that only allows outbound HTTPS to known domains. The team needs a C2 framework that blends with normal web traffic and supports multiple redirectors. Which framework choice best meets these constraints?
Select an answer first
27foundation · easy
During the planning phase of a red team engagement, what is the primary purpose of defining attack infrastructure requirements?
Select an answer first
28foundation · easy
Which of the following is a common technique used by redirectors to make traffic appear legitimate?
Select an answer first
29foundation · easy
What is the primary purpose of a redirector in attack infrastructure?
Select an answer first
30foundation · easy
When selecting a C2 framework for a red team engagement, which factor is most important to consider?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GRTP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GRTP” is a trademark of its owner, used for identification only.