Credential Attacks GCIL Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   An incident responder finds that an attacker used a stolen Kerberos ticket to access a file server. The ticket was issued for a service account that has access to sensitive data. The organization wants to limit the impact of similar attacks in the future. Which control is most effective?

   • ADisable Kerberos and use NTLM authentication
   • BConfigure Kerberos ticket lifetimes to be shorter
   • CIncrease the service account's password complexity
   • DUse only local accounts on the file server
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A small business uses a legacy application that only supports password authentication. The IT admin wants to reduce the risk of brute-force attacks on the application's login page. Which control would be most effective given the application's limitation?

   • ARequire users to use a password manager to generate random passwords.
   • BPlace the application behind a VPN and restrict access to known IP addresses.
   • CImplement account lockout after a small number of failed attempts.
   • DMonitor logs for failed logins and alert on anomalies.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which password attack method involves trying every possible combination of characters until the correct password is found?

   • ADictionary attack
   • BPassword spraying
   • CHybrid attack
   • DBrute-force attack
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   During a red team exercise, the team captured a user's password hash from a compromised workstation and then used it to access a file share. The file share is configured to accept NTLM authentication. Which change would most directly prevent this type of attack?

   • ADisable NTLM authentication on the file share and require Kerberos.
   • BEnable auditing on the file share to log access.
   • CIncrease the password length for the user account.
   • DImplement a host-based firewall on the file server.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the main risk of credential reuse?

   • AIt makes passwords easier to remember
   • BIt increases the likelihood of brute-force attacks
   • CIt makes passwords harder to crack
   • DA breach on one site can compromise accounts on other sites
   Reveal Solution Discussion Select an answer first