You are on a local network and need to intercept traffic between a client and the default gateway to capture credentials. Which technique is most effective and stealthy?

Send ICMP redirects to alter the client's routing table.

Use DHCP starvation to exhaust IP addresses and force clients to use your rogue DHCP server.

Exploit a switch vulnerability to enable port mirroring.

Perform ARP spoofing to redirect traffic through your machine.

You are mapping a network and need to identify load balancers and firewalls. Which technique is most effective for discovering these devices?

Perform a full TCP connect scan on all ports.

Send ICMP timestamp requests to identify device OS.

Use traceroute to map the network path.

Analyze HTTP response headers and cookies for load balancer indicators.

An attacker modifies the startup configuration of a router to include a hidden user account with administrative privileges. What is the primary purpose of this action?

To establish persistent access to the router

To intercept traffic passing through the router

GIAC Exploit Researcher and Advanced Penetration Tester

Domain 3Objective 2

Infrastructure Manipulation and Exploitation GXPN Practice Questions (Page 1)

Part of the Network and Infrastructure Attacks domain, which makes up ~14% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~10–17 in this domain), expect 3–6 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

7concepts

Questions 1–5

1application · medium
You are on a local network and need to intercept traffic between a client and the default gateway to capture credentials. Which technique is most effective and stealthy?
Select an answer first
2application · medium
You are mapping a network and need to identify load balancers and firewalls. Which technique is most effective for discovering these devices?
Select an answer first
3foundation · easy
An attacker gains administrative access to a network switch by trying common username and password combinations such as 'admin/admin' and 'cisco/cisco'. Which type of attack technique is being used against the network device?
Select an answer first
4foundation · easy
An attacker modifies the startup configuration of a router to include a hidden user account with administrative privileges. What is the primary purpose of this action?
Select an answer first
5foundation · easy
An attacker sends a crafted BGP route announcement to a router, advertising a more specific prefix for a legitimate network. This causes traffic to be redirected to the attacker's network. What is this attack exploiting?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GXPN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GXPN” is a trademark of its owner, used for identification only.

Infrastructure Manipulation and Exploitation GXPN Practice Questions (Page 1)

Questions 1–5

You are on a local network and need to intercept traffic between a client and the default gateway to capture credentials. Which technique is most effective and stealthy?

You are mapping a network and need to identify load balancers and firewalls. Which technique is most effective for discovering these devices?

An attacker gains administrative access to a network switch by trying common username and password combinations such as 'admin/admin' and 'cisco/cisco'. Which type of attack technique is being used against the network device?

An attacker modifies the startup configuration of a router to include a hidden user account with administrative privileges. What is the primary purpose of this action?

An attacker sends a crafted BGP route announcement to a router, advertising a more specific prefix for a legitimate network. This causes traffic to be redirected to the attacker's network. What is this attack exploiting?

Keep studying — Network and Infrastructure Attacks