Advanced Password Attacks GPEN Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which attack method is most appropriate when you have a list of common passwords and want to test them against many user accounts without triggering lockouts?

   • AHybrid attack
   • BPassword spraying
   • CBrute-force attack
   • DDictionary attack
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which tool is commonly used to extract password hashes from a Windows memory dump?

   • AWireshark
   • BMimikatz
   • CJohn the Ripper
   • DHashcat
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   You have compromised a domain user account and are on a workstation. You need to move laterally to a server. You have the ability to extract Kerberos tickets from memory. Which attack would allow you to reuse a service ticket to access the server without knowing the password?

   • AAS-REP roasting
   • BKerberoasting
   • CPass-the-hash
   • DPass-the-ticket
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   You are advising a company that stores passwords as unsalted SHA-256 hashes. They are considering using rainbow tables to speed up cracking during a security audit. What is the main limitation of rainbow tables in this scenario?

   • ARainbow tables are vulnerable to salting, which makes them ineffective
   • BRainbow tables are slower than brute-force for small keyspaces
   • CRainbow tables require a large amount of disk space, which is often prohibitive
   • DRainbow tables are only effective for passwords up to a certain length and character set
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   You have a mix of hash types: 1,000 NTLM hashes, 500 SHA-1 hashes, and 100 bcrypt hashes. Your GPU rig can crack NTLM at 100 GH/s, SHA-1 at 50 GH/s, and bcrypt at 10 kH/s. You have a 24-hour window. Which approach is most effective to maximize the number of cracked hashes?

   • AFocus only on the NTLM hashes because they are most common
   • BCrack the bcrypt hashes first because they are more secure
   • CUse a distributed cracking setup to crack all hash types simultaneously
   • DCrack the NTLM and SHA-1 hashes first, then allocate remaining time to bcrypt
   Reveal Solution Discussion Select an answer first