Red Team Engagement Planning and Reporting GRTP Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   Which of the following is the primary purpose of the rules of engagement (RoE) in a red team engagement plan?

   • ATo establish the boundaries and constraints within which the red team must operate, including authorized targets and permissible actions
   • BTo provide a detailed schedule of when each attack phase will occur
   • CTo list the names and contact information of all personnel involved in the engagement
   • DTo define the technical tools and techniques the red team will use during the engagement
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A red team engagement plan includes a test that could inadvertently disrupt a critical production database. The client has approved the test but wants to minimize the risk of downtime. Which risk mitigation strategy is most appropriate to include in the plan?

   • APerform the test on a weekend without notifying the database team.
   • BProceed with the test without additional precautions because the client approved it.
   • CPerform the test during a scheduled maintenance window and have a rollback plan ready.
   • DRemove the test from the engagement scope to avoid any risk.
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   What is the primary purpose of a debriefing session after a red team engagement?

   • ATo discuss the findings and provide immediate feedback to the organization
   • BTo sign legal documents
   • CTo collect the red team's equipment
   • DTo plan the next engagement
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A red team engagement has just ended. The team is about to deliver the final report and conduct a debrief. The client's security manager asks for a lessons-learned session. Which post-engagement activity should the red team lead prioritize?

   • ADeliver the final report and then schedule a separate lessons-learned meeting with the client.
   • BHold the lessons-learned session only with the red team, excluding the client.
   • CCombine the final report delivery and lessons-learned into a single meeting to save time.
   • DSkip the lessons-learned session because the report already contains all necessary information.
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A red team is planning a two-week engagement for a client with multiple office locations. The engagement requires on-site presence at one location and remote access to another. The team has limited budget and must decide how to allocate resources. Which resource planning decision best balances the need for on-site presence with budget constraints?

   • ASend a small on-site team and have the rest operate remotely using secure remote access tools.
   • BSend the full team to the on-site location and use a virtual private network for remote access to the other location.
   • CCancel the on-site requirement and conduct the entire engagement remotely.
   • DSend the full team to the remote location and use a local contractor for the on-site work.
   Reveal Solution Discussion Select an answer first