A red team is using a redirector to forward C2 traffic to a server. The target's network defenders have started blocking the redirector's IP. The team needs to maintain C2 connectivity with minimal disruption. Which approach is most effective?

Use a pool of redirectors with different IPs and rotate them automatically

Switch to direct connections to the C2 server

Use a single redirector with a high-availability setup

Use a redirector on the same IP as the C2 server

After a red team engagement concludes, the team must decommission the attack infrastructure. Which step is most important to ensure no residual artifacts remain?

Leave the infrastructure running for a few weeks to ensure no data is lost.

Change the passwords on the infrastructure and leave it for the next engagement.

Only delete the C2 server but keep the redirector for future use.

Delete all cloud resources, revoke DNS records, and cancel domain registrations.

GIAC Red Team Professional

Domain 1Objective 3

Creating the Attack Infrastructure GRTP Practice Questions (Page 7)

Part of the Red Team Operations and Infrastructure domain, which makes up ~38% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~27–46 in this domain), expect 7–12 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

7concepts

Questions 31–32

31expert · hard
A red team is using a redirector to forward C2 traffic to a server. The target's network defenders have started blocking the redirector's IP. The team needs to maintain C2 connectivity with minimal disruption. Which approach is most effective?
Select an answer first
32application · medium
After a red team engagement concludes, the team must decommission the attack infrastructure. Which step is most important to ensure no residual artifacts remain?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GRTP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GRTP” is a trademark of its owner, used for identification only.

Creating the Attack Infrastructure GRTP Practice Questions (Page 7)

Questions 31–32

A red team is using a redirector to forward C2 traffic to a server. The target's network defenders have started blocking the redirector's IP. The team needs to maintain C2 connectivity with minimal disruption. Which approach is most effective?

After a red team engagement concludes, the team must decommission the attack infrastructure. Which step is most important to ensure no residual artifacts remain?

Keep studying — Red Team Operations and Infrastructure