Red Team Engagement Planning and Reporting GRTP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which stakeholder group is primarily responsible for approving the rules of engagement and providing legal authorization for a red team engagement?

   • AThe external penetration testing vendor
   • BThe IT help desk staff
   • CThe red team operators
   • DThe organization's executive leadership and legal counsel
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A red team is planning an engagement with a tight timeline. The client has requested a broad scope, but the team has limited personnel. The team lead must balance the client's expectations with the team's capacity. Which approach is most appropriate?

   • AAccept the full scope and work overtime to complete it, even if it risks quality.
   • BExtend the timeline without consulting the client, to allow more time for the full scope.
   • CNegotiate a phased approach, where the highest-priority objectives are tested first and lower-priority areas are covered if time permits.
   • DReduce the scope unilaterally to match the team's capacity, without discussing with the client.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A red team is planning an engagement for a client that has multiple business units. The client's legal team wants to ensure that the engagement does not disrupt production systems. Which component of the engagement plan should explicitly address this?

   • AThe rules of engagement, which define allowed actions and constraints, including any restrictions on production systems.
   • BThe stakeholder communication plan, which will inform business units about the engagement.
   • CThe resource allocation plan, which will ensure enough personnel are available to handle disruptions.
   • DThe executive summary of the final report, which will describe any disruptions that occurred.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A red team is preparing for an engagement with a client that has a complex organizational structure. The client has designated a single point of contact (POC) for all communication. Mid-engagement, the red team discovers a critical finding that requires immediate attention from a specific technical team that is not the POC. What should the red team do?

   • AReport the finding to the designated POC and request that they relay it to the technical team.
   • BPost the finding on the client's internal chat channel so the technical team sees it.
   • CWait until the final report to include the finding, as it is too late to change the communication plan.
   • DContact the technical team directly to ensure they receive the information quickly.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A red team is planning an engagement for a multinational client with operations in a country with strict data-protection laws. The client wants the red team to test a system that stores personal data of citizens in that country. The red team's infrastructure is located in another country. Which consideration is most critical for the engagement plan?

   • AUse only cloud-based tools hosted in the red team's home country to avoid local legal issues.
   • BRely on the client's legal team to handle any legal issues after the engagement.
   • CAvoid testing the system that stores personal data to eliminate legal risk.
   • DEnsure that the rules of engagement and data-handling procedures comply with the local data-protection laws, including any restrictions on cross-border data transfer.
   Reveal Solution Discussion Select an answer first