You have compromised a domain-joined Windows server. Your goal is to identify accounts that are likely to have administrative privileges in the domain. Which enumeration technique would be most effective?

List all local users on the compromised server

Search for password files in the server's file system

Query Active Directory for members of the Domain Admins group

Enumerate all user accounts and their last logon times

GIAC Red Team Professional

Domain 2Objective 1

Gaining Access GRTP Practice Questions (Page 10)

Part of the Initial Access and Discovery domain, which makes up ~30% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~21–36 in this domain), expect 7–12 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

9concepts

Questions 46–47

46foundation · easy
Which phishing technique specifically targets senior executives or high-level individuals within an organization?
Select an answer first
47application · medium
You have compromised a domain-joined Windows server. Your goal is to identify accounts that are likely to have administrative privileges in the domain. Which enumeration technique would be most effective?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GRTP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GRTP” is a trademark of its owner, used for identification only.

Gaining Access GRTP Practice Questions (Page 10)

Questions 46–47

Which phishing technique specifically targets senior executives or high-level individuals within an organization?

You have compromised a domain-joined Windows server. Your goal is to identify accounts that are likely to have administrative privileges in the domain. Which enumeration technique would be most effective?

Keep studying — Initial Access and Discovery