You have set up an NTLM relay listener on your attack machine. You need to relay authentication from a victim to a target server that has SMB signing disabled. Which protocol is most likely to be successfully relayed?

HTTP relay to the target server's web service.

SMB relay to the target server's SMB service.

RDP relay to the target server.

LDAP relay to the domain controller.

In a Kerberoasting attack, what does the attacker request from the Key Distribution Center (KDC) to obtain a ticket that can be cracked offline?

A ticket-granting ticket (TGT) for the current user

A certificate from the certificate authority

A Kerberos pre-authentication timestamp

A service ticket (TGS) for a service principal name (SPN) associated with a user account

What is the purpose of a 'skeleton key' attack in Active Directory?

To disable Kerberos pre-authentication for all users

To inject a backdoor password that works for any account in the domain

To create a new domain admin account

In an Active Directory forest trust, what is the 'SID filtering' feature designed to prevent?

An attacker from a trusted forest from using SID history to gain elevated privileges in the trusting forest

An attacker from performing DCSync attacks

An attacker from using Kerberos tickets to impersonate users

An attacker from the trusting forest from accessing resources in the trusted forest

EC-CouncilCertified Penetration Testing Professional

Domain 5Objective 1

Active Directory Penetration Testing CPENT Practice Questions (Page 1)

Part of the Active Directory and Lateral Movement domain, which makes up ~8% of our current practice bank.

34questions here

7free pages

8concepts

Questions 1–5

1application · medium
You have set up an NTLM relay listener on your attack machine. You need to relay authentication from a victim to a target server that has SMB signing disabled. Which protocol is most likely to be successfully relayed?
Select an answer first
2foundation · easy
In a Kerberoasting attack, what does the attacker request from the Key Distribution Center (KDC) to obtain a ticket that can be cracked offline?
Select an answer first
3foundation · easy
What is the purpose of a 'skeleton key' attack in Active Directory?
Select an answer first
4foundation · easy
In an Active Directory forest trust, what is the 'SID filtering' feature designed to prevent?
Select an answer first
5foundation · easy
Which lateral movement technique uses the SMB protocol to create a service on a remote system and execute a command, often requiring administrative credentials?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CPENT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CPENT” is a trademark of its owner, used for identification only.