Examers.io
ExamsOrganizationsHow it worksPricingHelp & FAQ
Sign inStart free
GIAC (SANS) logo

GIAC Penetration Tester (GPEN)

Domain 3Objective 4

Advanced Password Attacks GPEN Practice Questions (Page 5)

Part of the Password Attacks and Credential Attacks domain, which makes up ~28% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~20–34 in this domain), expect 5–9 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here
11free pages
15concepts

Questions 21–25

  1. 21foundation · easy

    What does Kerberoasting target?

    Select an answer first
  2. 22expert · hard

    You have captured several hashes from a Windows domain: one is a Kerberos TGT, one is an NTLM hash, and one is a service ticket from Kerberoasting. You want to crack the service ticket offline. Which hash mode should you use in Hashcat?

    Select an answer first
  3. 23foundation · easy

    What is the primary purpose of using rule-based attacks in password cracking?

    Select an answer first
  4. 24foundation · easy

    Which protocol is most commonly associated with pass-the-hash attacks?

    Select an answer first
  5. 25foundation · easy

    What is credential stuffing?

    Select an answer first
Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GPEN

Keep studying — Password Attacks and Credential Attacks

Full GPEN curriculum →Every domain, objective & concept — with linked practiceGPEN exam overview →GIAC Penetration Tester (GPEN)

Other objectives in Password Attacks and Credential Attacks

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPEN” is a trademark of its owner, used for identification only.