Online Access Free GDAT Exam Questions

Which method is commonly used by attackers to exfiltrate data using the DNS tunneling technique?
Response:

• A.Using FTP servers to upload stolen data
• B.Transferring data via encrypted HTTP requests
• C.Exploiting open SMB shares for file transfer
• D.Embedding data within DNS queries

Which of the following are common tools used in adversary emulation exercises?
(Choose two)
Response:

• A.Burp Suite
• B.Nessus
• C.Metasploit
• D.Cobalt Strike

Which of the following is a sign that a malicious payload has been successfully executed?
Response:

• A.System configuration changes automatically reverted
• B.Unusual outbound traffic to unknown IP addresses
• C.Faster system performance
• D.Reduced network latency

Which of the following should be a focus area when reviewing the effectiveness of controls after adversary emulation?
Response:

• A.Cost analysis of the tools used
• B.Number of emulations that can be performed in a day
• C.Time it takes to detect and respond to the emulation activities
• D.Public relations impact

What are essential components of a Kerberos-based authentication system in Active Directory?
Response:

• A.Security Account Manager (SAM)
• B.Access Control List (ACL)
• C.Ticket Granting Ticket (TGT)
• D.Key Distribution Center (KDC)