工作與課業夾擊之下，留給 CCRTM-SC 考試的準備時間總是不夠用？PDFExamDumps 把 CREST Certified Red Team Manager - Scenario 的精華濃縮成 20 道練習題，讓你用零碎時間也能高效率複習。

CREST CCRTM-SC 考試概覽:

認證廠商:	CREST
考試名稱:	CREST Certified Red Team Manager - Scenario
考試代碼:	CCRTM-SC
考試時間:	195 分鐘
相關認證:	CREST Certified Red Team Manager (CCRTM)
實際考試題數:	未公開
證照有效期限:	自應考日起算 3 年
及格分數:	CREST 未公開情境考核部分的合格分數
考試費用:	£800 + VAT
支援語言:	英文
考試形式:	情境筆試, 情境導向題
考試報名:	CREST 認證價格與報名預約 Pearson VUE
範例考題:
考試方式:	在 Pearson VUE 測試中心應考；CCRTM Scenario 為情境筆試。考試時間為 3 小時，考前另有 15 分鐘閱讀時間。
必備條件:	CREST 未針對 CCRTM 考試設定前置條件。CCRTM 資格認證包含兩個需分別預約的考科：選擇題與問答題 (Multiple Choice & Long Form) 以及情境考核 (Scenario)。應考人必須通過這兩個部分。
官方大綱網址:	https://www.crest-approved.org/ccrtm-faqs/

CREST CCRTM-SC 考試大綱主題:

CREST Certified Red Team Manager - Scenario 備考必讀問答

最新的 CREST Certified CCRTM-SC 免費考試真題：

問題 #1

Background: You manage a red team engagement for Brackenfell Retail Group under an RoE that explicitly permits "controlled, non-destructive proof-of-concept payload execution to demonstrate exploitation of identified vulnerabilities" but explicitly prohibits "any activity resulting in encryption, deletion, or exfiltration of production data." During week 5, your team successfully exploits a vulnerability in an internal file server and, to demonstrate impact, executes a small proof-of-concept script that creates a single new, clearly labelled test file ("REDTEAM-POC-DO-NOT-DELETE.txt") containing only benign placeholder text, then takes a screenshot as evidence, and immediately deletes the test file it created.
A junior tester on the team, reviewing this activity in the daily standup, raises a question: "Doesn't creating and then deleting a file, even one we created ourselves, technically fall under 'deletion... of production data,' since it was on a production file server?" Separately, that same day, a different, more senior tester proposes going further on a different system: rather than just creating a placeholder file, they suggest locating one genuinely low-value, clearly non-critical existing file (e.g., an old, unused template document) already present on a production file share, and temporarily renaming it (not deleting it) to demonstrate write-access impact more "authentically," planning to rename it back immediately afterward.
Question: Assess whether the actions already taken (creating and deleting the labelled test file) were consistent with the RoE, and explain how you should respond to the senior tester's proposal to rename an existing production file. What broader RoE interpretation principle does this scenario illustrate?

問題 #2

Background: You are the Red Team Manager for a 12-week TIBER-EU-aligned engagement. In week 7, your firm wins a large, unrelated new contract that your firm's leadership is keen to staff quickly, and you are asked by your own Practice Director to release your firm's second-most-senior consultant on the current engagement
- who has been leading the more technically complex of two parallel attack paths - to begin work on the new contract "part-time, starting Monday, just two days a week for now," while remaining nominally on the TIBER-EU engagement the other three days.
The consultant in question tells you privately that they do not believe they can properly context-switch between a slow-paced, patient, intelligence-led campaign requiring sustained situational awareness of a live target environment, and a fast-moving new client kickoff, without a real risk of errors or missed detail on one or both engagements. Separately, the client's Control Team Lead has no visibility yet of this proposed change and has previously stressed how much they value consistency of personnel on such a sensitive, lengthy engagement.
Question: As Red Team Manager, how would you handle this internal resourcing request from your own firm's leadership, balancing your firm's commercial interests against your professional obligations on the current TIBER-EU engagement? Explain your reasoning and the steps you would take.

問題與答案：