Attacking Passwords GCIH Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which attack uses username and password pairs obtained from a previous data breach to attempt access to other systems?

   • APassword spraying
   • BPass-the-hash attack
   • CBrute force attack
   • DCredential stuffing
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   In the context of credential and access security, what is the primary purpose of a password attack?

   • ATo encrypt passwords so that they cannot be read by unauthorized users
   • BTo reset a user's password to a known value for administrative purposes
   • CTo gain unauthorized access to systems or data by obtaining or bypassing valid credentials
   • DTo test the strength of a password by comparing it against a list of common passwords
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A security architect is designing a mitigation strategy for pass-the-hash attacks in a Windows environment that relies heavily on legacy NTLM authentication for line-of-business applications. The architect must reduce the risk of pass-the-hash while maintaining application compatibility. Which approach is most appropriate?

   • ADisable NTLM authentication domain-wide
   • BDeploy Credential Guard on all domain-joined workstations and servers
   • CImplement account lockout after 3 failed attempts
   • DEnforce a minimum password length of 25 characters
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   During an investigation, a domain administrator discovers that an attacker extracted a Kerberos ticket-granting ticket (TGT) from the memory of a domain controller and is using it to request service tickets for multiple resources as a high-privilege user. The attacker never obtained the user's password or NTLM hash. Which attack technique is being used?

   • APass-the-ticket attack
   • BPassword spraying
   • CPass-the-hash attack
   • DCredential stuffing
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security team is analyzing a captured hash of a user's password. The password is known to be 'Summer2024!'. The team wants to test whether the hash can be cracked using a wordlist that contains common passwords and their variations. Which cracking technique would be most appropriate?

   • ACredential stuffing
   • BHybrid attack that appends digits and symbols to dictionary words
   • CPass-the-hash attack
   • DPure brute force that tries every possible character combination
   Reveal Solution Discussion Select an answer first