GIAC Red Team Professional
Domain 3Objective 2
Leveraging the Domain GRTP Practice Questions (Page 12)
Part of the Active Directory Attacks and Post-Exploitation domain, which makes up ~33% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~23–40 in this domain), expect 8–13 from this objective — we provide 65 practice questions to prepare you well beyond it. (estimate)
65questions here
13free pages
25concepts
Questions 56–60
- 56
What is WinRM?
Select an answer first - 57
You have obtained an account that has Replicating Directory Changes and Replicating Directory Changes All permissions. Which technique can you use to obtain password hashes for any domain user?
Select an answer first - 58
You are in a child domain and have compromised a service account that has a trust relationship with a parent domain. You want to move laterally to the parent domain without triggering a full domain compromise. Which technique is most appropriate?
Select an answer first - 59
You have compromised a workstation and dumped the NTLM hash of a local administrator account. The hash belongs to an account that is a member of the local Administrators group on several servers. You need to move laterally to those servers without knowing the plaintext password. Which technique should you use?
Select an answer first - 60
What is a Silver Ticket?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GRTP” is a trademark of its owner, used for identification only.