Which of the following is an example of establishing persistence on a network device?

Using a default credential to log in once and then logging out

Installing a backdoor in the device's firmware that survives reboots

Sending a crafted SNMP trap to cause a false alarm

Performing a one-time ARP spoofing attack to intercept a session

A network uses HSRP for gateway redundancy. You want to redirect traffic to your attacker-controlled router. Which attack is most effective?

Send a higher-priority HSRP advertisement to become the active router.

Use ARP spoofing to impersonate the virtual IP.

Send a lower-priority advertisement to force the other router to become active.

Disable HSRP by sending a shutdown message.

Which of the following is an example of directly attacking a network device's firmware to compromise its functionality?

Using a rogue DHCP server to assign malicious DNS settings

Sending a crafted HTTP request to a web server to exploit SQL injection

Performing a man-in-the-middle attack to intercept credentials

Uploading a malicious firmware image to a router that contains a backdoor

You have compromised a core switch and need to maintain access without being detected by the network monitoring team. Which persistence method is most stealthy?

Create a new SNMP community string with read-write access.

Modify the switch's running configuration to add a backdoor VLAN.

Install a covert backdoor in the switch's IOS image.

Enable a hidden telnet port on a non-standard port.

GIAC Exploit Researcher and Advanced Penetration Tester

Domain 3Objective 2

Infrastructure Manipulation and Exploitation GXPN Practice Questions (Page 2)

Part of the Network and Infrastructure Attacks domain, which makes up ~14% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~10–17 in this domain), expect 3–6 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

7concepts

Questions 6–10

6foundation · easy
Which of the following is an example of establishing persistence on a network device?
Select an answer first
7application · medium
A network uses HSRP for gateway redundancy. You want to redirect traffic to your attacker-controlled router. Which attack is most effective?
Select an answer first
8foundation · easy
Which of the following is an example of directly attacking a network device's firmware to compromise its functionality?
Select an answer first
9foundation · easy
Which attack aims to disrupt a network's failover mechanism by sending forged health-check messages to a load balancer, causing it to mark a healthy server as down and redirect traffic to a less secure or attacker-controlled server?
Select an answer first
10expert · hard
You have compromised a core switch and need to maintain access without being detected by the network monitoring team. Which persistence method is most stealthy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GXPN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GXPN” is a trademark of its owner, used for identification only.