Active Directory/Domains GDAT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which protocol is commonly targeted in an NTLM relay attack to gain access to resources?

   • ASNMP (Simple Network Management Protocol)
   • BFTP (File Transfer Protocol)
   • CHTTP (Hypertext Transfer Protocol)
   • DSMB (Server Message Block)
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   You are assessing a new client's Active Directory environment. You discover that the 'Domain Admins' group is a member of the local 'Administrators' group on all domain-joined servers. Which security implication is most accurate?

   • AThe Domain Admins group is only able to log on to domain controllers, not member servers.
   • BThe Domain Admins group is automatically protected by the adminSDHolder mechanism, preventing privilege escalation.
   • CThe Domain Admins group is a protected group that cannot be added to local groups.
   • DAny compromise of a Domain Admins account grants immediate administrative access to all domain-joined servers.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is a domain trust relationship?

   • AA DNS zone transfer between domain controllers
   • BA shared folder between two domains
   • CA firewall rule that permits network traffic between domains
   • DA link between two domains that allows users in one domain to access resources in the other
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   You have gained write access to a Group Policy Object that applies to a set of servers. You want to achieve remote code execution on those servers without directly modifying local services or creating new domain accounts. Which GPO setting is most appropriate?

   • AConfigure a scheduled task via GPO Preferences to run a command as SYSTEM on the affected servers.
   • BUse GPO to modify the Local Security Policy to disable Windows Defender on the servers.
   • CUse GPO to push a PowerShell script via the startup script setting, but only if the servers are rebooted.
   • DModify the default domain policy to add a new local administrator account on the servers.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   You have compromised a workstation in a domain and have domain user credentials. You want to identify all paths to domain admin. Which tool is most appropriate for this task?

   • AResponder
   • BBloodHound
   • CPowerView
   • DMimikatz
   Reveal Solution Discussion Select an answer first