GPEN Command and Control Practice Question
You are setting up a C2 infrastructure for a penetration test. To protect the backend C2 server from direct exposure, you deploy a redirector. Which of the following best describes the primary function of a redirector in this context?
⚠ Common exam trap
Watch out — candidates often confuse the redirector's filtering role with encryption or domain generation, which are separate C2 components.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It acts as a proxy that forwards only malicious traffic to the C2 server while blocking or misdirecting other traffic.
A redirector's primary function is to act as a proxy that filters incoming traffic, forwarding only legitimate C2 traffic to the backend server while blocking or misdirecting other connections. This protects the C2 server's location and makes it more difficult for defenders to identify and block the actual C2 infrastructure. Encryption, load balancing, and domain generation are separate concerns handled by other components or techniques.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
It generates random domain names for the C2 server to evade domain blacklisting.
Why it's wrong here
Domain generation algorithms (DGAs) are used to generate random domain names, not redirectors. Redirectors operate at the network level, forwarding traffic based on rules. They do not create domain names. While DGAs can complement a C2 infrastructure, they are a separate technique. Thus, this option does not describe the primary function of a redirector.
- ✓
It acts as a proxy that forwards only malicious traffic to the C2 server while blocking or misdirecting other traffic.
Why this is correct
A redirector is designed to filter incoming traffic, allowing only connections that match specific criteria (e.g., a secret header or specific URI) to reach the backend C2 server. Other traffic, such as from security researchers or scanners, is blocked or redirected to a benign site. This protects the C2 server's identity and location, making it harder for defenders to identify and block the actual C2 infrastructure.
- ✗
It load-balances incoming connections across multiple C2 servers to ensure high availability.
Why it's wrong here
Load balancing is a potential feature of some redirectors, but it is not their primary function. The main goal of a redirector is to hide the C2 server and filter traffic. While multiple redirectors can be used for resilience, load balancing is secondary. The scenario emphasizes protecting the backend server from direct exposure, which is achieved through filtering and redirection, not load balancing.
- ✗
It encrypts all traffic between the compromised host and the C2 server, ensuring confidentiality.
Why it's wrong here
While encryption is important, a redirector's primary role is not encryption; that is typically handled by the C2 protocol itself (e.g., HTTPS). Redirectors can pass through encrypted traffic, but they do not add an additional layer of encryption. Their main purpose is to obfuscate and protect the backend server, not to provide confidentiality. Therefore, this is not the primary function.
About these practice questions
This GPEN question is part of Courseiva's 298-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official GIAC exam blueprint
This GPEN practice question is part of Courseiva's free GIAC certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the GPEN exam.