Red Team Engagement Planning and Reporting GRTP Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following is a key logistical consideration when planning a red team engagement?

   • AThe preferred coffee brand of the team
   • BThe color of the red team's t-shirts
   • CThe availability of a secure communication channel for the red team
   • DThe number of monitors in the war room
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A red team found a vulnerability that allows an attacker to read sensitive configuration files on a web server. The vulnerability is rated medium severity, but the configuration files contain database credentials that could lead to a full compromise. How should the red team classify this finding?

   • ALeave the severity unrated and let the client decide.
   • BKeep the medium severity rating because the vulnerability itself is medium.
   • CDowngrade the severity to low because the vulnerability is only an information disclosure.
   • DUpgrade the severity to high because the exposed credentials could lead to a full compromise.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A red team is planning an engagement that will require the use of multiple cloud-based command-and-control (C2) servers. The client has a strict policy that no data may leave the country where the engagement is taking place. The red team's C2 infrastructure is hosted in a different country. Which action is most appropriate?

   • AUse a VPN to route traffic through the client's country, but keep the C2 servers abroad.
   • BUse the existing C2 infrastructure and encrypt all traffic to protect the data in transit.
   • CAsk the client to waive the data-residency policy for the duration of the engagement.
   • DProvision C2 infrastructure within the same country as the engagement, and ensure that any data collected remains within that country's boundaries.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which section of a red team engagement report is intended for senior management and provides a high-level overview of the engagement's purpose and key findings?

   • AAppendices
   • BMethodology
   • CTechnical Findings
   • DExecutive Summary
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A red team is planning an engagement that will involve phishing employees. The client is concerned about the risk of employees being upset or confused by the simulated attack. Which risk mitigation is most appropriate?

   • AOnly phish employees who have previously failed security awareness training.
   • BConduct the phishing test without telling anyone to ensure realism.
   • CInclude a clear communication plan in the RoE that informs employees about the engagement and provides a point of contact for questions.
   • DCancel the phishing portion of the engagement to avoid any risk to employee morale.
   Reveal Solution Discussion Select an answer first