Why is credential stuffing often successful?

Because users tend to reuse passwords across multiple services

Because it bypasses multi-factor authentication

Because it uses brute-force to guess passwords

Because it exploits weak encryption

What is the output of an AS-REP roasting attack that is later cracked?

A Kerberos ticket granting ticket (TGT)

The service ticket for the target account

The plaintext password of the target account

The NTLM hash of the target account

After extracting hashes from memory, what is the next step in an attack?

Decrypt the hashes with a public key

Use the hashes to request a Kerberos ticket

Crack the hashes using a tool like Hashcat or John the Ripper

Submit the hashes to a certificate authority

What does a pass-the-hash attack allow an attacker to do?

Authenticate to a system using an NTLM hash without knowing the plaintext password

Decrypt the NTLM hash to recover the plaintext password

Bypass multi-factor authentication

GIAC Penetration Tester (GPEN)

Domain 3Objective 4

Advanced Password Attacks GPEN Practice Questions (Page 7)

Part of the Password Attacks and Credential Attacks domain, which makes up ~28% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~20–34 in this domain), expect 5–9 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

15concepts

Questions 31–35

31foundation · easy
Why is credential stuffing often successful?
Select an answer first
32foundation · easy
What is the output of an AS-REP roasting attack that is later cracked?
Select an answer first
33foundation · easy
After extracting hashes from memory, what is the next step in an attack?
Select an answer first
34foundation · easy
What does a pass-the-hash attack allow an attacker to do?
Select an answer first
35foundation · easy
Which tool is commonly used to extract Kerberos tickets from memory for pass-the-ticket attacks?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GPEN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPEN” is a trademark of its owner, used for identification only.