You have compromised a router and want to ensure you can regain access even if the device is rebooted and the configuration is reloaded. Which method provides the most persistent access?

Create a local user account in the running configuration.

Use a default password that is rarely changed.

Plant a backdoor in the device's firmware image.

Set a scheduled task to re-add your user every hour.

An attacker on the same subnet sends forged ARP replies to associate the victim's IP address with the attacker's MAC address. What is the primary goal of this attack?

To change the victim's IP address

To crash the victim's network stack

To intercept and potentially modify traffic destined for the victim

To bypass the firewall on the victim's machine

You have compromised a network switch and want to maintain access for a long-term red team exercise. The switch is managed via SNMP and has a web interface. Which action is most appropriate for persistence?

Upload a new firmware image that includes a backdoor.

Create a new SNMP community string with write access and save it to the startup configuration.

Change the existing SNMP community string to a value you control.

Disable the web interface to reduce the attack surface.

GIAC Exploit Researcher and Advanced Penetration Tester

Domain 3Objective 2

Infrastructure Manipulation and Exploitation GXPN Practice Questions (Page 5)

Part of the Network and Infrastructure Attacks domain, which makes up ~14% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~10–17 in this domain), expect 3–6 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

7concepts

Questions 21–25

21application · medium
You have compromised a router and want to ensure you can regain access even if the device is rebooted and the configuration is reloaded. Which method provides the most persistent access?
Select an answer first
22foundation · easy
Which attack involves an attacker sending a forged DNS response to a client, causing the client to resolve a legitimate domain name to an attacker-controlled IP address?
Select an answer first
23foundation · easy
An attacker on the same subnet sends forged ARP replies to associate the victim's IP address with the attacker's MAC address. What is the primary goal of this attack?
Select an answer first
24foundation · easy
After compromising a network switch, an attacker uses the switch as a relay to launch attacks against systems on a separate VLAN. What is this technique called?
Select an answer first
25application · medium
You have compromised a network switch and want to maintain access for a long-term red team exercise. The switch is managed via SNMP and has a web interface. Which action is most appropriate for persistence?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GXPN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GXPN” is a trademark of its owner, used for identification only.

Infrastructure Manipulation and Exploitation GXPN Practice Questions (Page 5)

Questions 21–25

You have compromised a router and want to ensure you can regain access even if the device is rebooted and the configuration is reloaded. Which method provides the most persistent access?

Which attack involves an attacker sending a forged DNS response to a client, causing the client to resolve a legitimate domain name to an attacker-controlled IP address?

An attacker on the same subnet sends forged ARP replies to associate the victim's IP address with the attacker's MAC address. What is the primary goal of this attack?

After compromising a network switch, an attacker uses the switch as a relay to launch attacks against systems on a separate VLAN. What is this technique called?

You have compromised a network switch and want to maintain access for a long-term red team exercise. The switch is managed via SNMP and has a web interface. Which action is most appropriate for persistence?

Keep studying — Network and Infrastructure Attacks