CCRTS Practice Questions - CREST Certified Red Team Specialist (CCRTS) Exam - CCRTS Practice Questions - CREST Certified Red Team Specialist (CCRTS) Exam

Question 1

During a red team engagement, which MITRE ATT&CK tactic describes the adversary's goal of maintaining a foothold after initial compromise?

Initial Access Persistence Defense Evasion Collection

Correct Answer:

Persistence

Question 2

A red team operator needs to enumerate Active Directory users without triggering LDAP query anomaly alerts. Which approach is most operationally secure?

Run ldapsearch with anonymous bind from an external IP Use BloodHound's SharpHound collector with stealth options and randomised delay intervals Execute net user /domain from a newly compromised workstation without delay Perform a zone transfer against the domain's DNS server

Correct Answer:

Use BloodHound's SharpHound collector with stealth options and randomised delay intervals

Question 3

Which Kerberos attack abuses accounts that have 'Do not require Kerberos preauthentication' set and does NOT require any domain credentials to execute?

Kerberoasting AS-REP Roasting Pass-the-Ticket Silver Ticket

Correct Answer:

AS-REP Roasting

Question 4

An operator wants to bypass Windows Defender AMSI (Antimalware Scan Interface) before loading a PowerShell-based implant. Which technique directly patches the AmsiScanBuffer function in memory?

Encoding the payload with base64 and piping it through iex Disabling PowerShell Constrained Language Mode via registry Patching the AmsiScanBuffer return value to AMSI_RESULT_CLEAN in the process memory Setting the AMSI_DISABLE environment variable before launching PowerShell

Correct Answer:

Patching the AmsiScanBuffer return value to AMSI_RESULT_CLEAN in the process memory

Question 5

During initial access via phishing, a red team operator uses a lure that routes the target through an Adversary-in-the-Middle (AiTM) proxy. What primary capability does this technique provide that standard phishing does not?

Delivery of macro-enabled Office documents Capture of session cookies to bypass MFA Automated credential spraying against the target's email gateway Exfiltration of files from the victim's mailbox

Correct Answer:

Capture of session cookies to bypass MFA

Exam overview

About this Exam

Prepare with the CCRTS Practice Questions - CREST Certified Red Team Specialist (CCRTS) Exam practice quiz. This question bank includes 100 questions covering team, operator, technique, engagement, and windows. Use it to review important concepts, identify knowledge gaps, and build confidence for the related exam, course, or assessment.

More details

Additional Information

CCRTS Practice Questions - CREST Certified Red Team Specialist (CCRTS) Exam

This practice set contains 100 questions from the matching question bank and focuses on team, operator, technique, engagement, and windows. Work through each question carefully, review the provided solutions, and revisit topics that need more study before your next attempt.

This is an independent study resource intended for practice and review; it is not an official examination or an endorsement by any organization named in the title.

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.

No fixed duration is currently configured for this quiz.

Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.

Yes. You can retake the practice test again as you continue studying during your available access period.

After your access is confirmed, you can continue into the complete practice exam from this quiz flow.

Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.

Correct Answer:

Correct Answer:

Correct Answer:

Correct Answer:

Correct Answer:

About this Exam

Additional Information

CCRTS Practice Questions - CREST Certified Red Team Specialist (CCRTS) Exam

Frequently Asked Questions

Related Questions

ISC2 Certified in Cybersecurity Practice Exam

3rd Class Steam Engineer Practice Test

Arizona CNA Certified Nursing Assistant Practice Exam

Fourth Class Steam Engineer Practice Exam

Certified Professional Public Buyer (CPPB) Practice Exam

Certified Specialist Business Intelligence (CSBI) Practice Test