GIAC Exam GCFR Topic 1 Question 38 Discussion

Actual exam question for GIAC's GCFR exam

Question #: 38
Topic #: 1

[All GCFR Questions]

A threat actor conducts brute force attacks against SSH services to gain Initial access. This attack technique falls under which category of the Google Workspace MITRE ATT&CK matrix?

ADefense evasion

BDiscovery

CCredential access

DCollection

Show Suggested Answer

Suggested Answer: C

by Lashaun at Feb 12, 2025, 03:14 AM

Limited Time Offer

25%

Off

Get Premium GCFR Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kristine

4 days ago

I'm not sure. Could it also be A) Defense evasion?

upvoted 0 times

...

Karima

4 days ago

B) Discovery? Seriously? That's like saying my dog is a cat. Brute force is all about accessing credentials, not just discovering them.

upvoted 0 times

...

Florinda

8 days ago

I agree with Carissa. Brute force attacks are used to gain credentials.

upvoted 0 times

...

Melodie

11 days ago

C) Credential access - Duh, that's the obvious one! Brute force attacks are all about getting those sweet, sweet credentials.

upvoted 0 times

...

Carissa

14 days ago

I think the answer is C) Credential access.

upvoted 0 times

...