What is the primary characteristic of a Skeleton Key attack?

It injects a backdoor password into the domain controller's memory

It forges Kerberos tickets using the KRBTGT hash

It exploits a misconfigured service account to gain domain admin

It modifies the AdminSDHolder ACL to grant full control

What is the primary goal of exploiting domain trust relationships?

To escalate privileges across domain or forest boundaries

To disable Kerberos pre-authentication

To reset the KRBTGT password in the trusted domain

To create a new domain controller

What is the key material required to forge a Golden Ticket in an Active Directory domain?

The certificate of the domain controller

The domain SID and a service account's hash

The NTLM hash of a domain admin user

The password hash of the KRBTGT account

During a domain migration, a penetration tester discovers that a user account has a SID History attribute that includes a SID from a privileged group in the old domain. The tester wants to exploit this to gain elevated access in the new domain. What is the most likely attack?

Use the skeleton key attack on the domain controller

Forge a golden ticket using the KRBTGT hash

Use the SID History to authenticate and gain the privileges of the old domain group

Perform a Kerberoasting attack on the user account

Which of the following is a common technique used to exploit domain trusts?

Creating a new trust relationship

Resetting the KRBTGT password in the trusted domain

Disabling SID filtering on the trust

Using the trust key to forge Kerberos tickets for the trusted domain

GIAC Penetration Tester (GPEN)

Domain 4Objective 2

Domain Escalation and Persistence Attacks GPEN Practice Questions (Page 3)

Part of the Active Directory Attacks domain, which makes up ~15% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–18 in this domain), expect 6–9 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

12concepts

Questions 11–15

11foundation · easy
What is the primary characteristic of a Skeleton Key attack?
Select an answer first
12foundation · easy
What is the primary goal of exploiting domain trust relationships?
Select an answer first
13foundation · easy
What is the key material required to forge a Golden Ticket in an Active Directory domain?
Select an answer first
14application · medium
During a domain migration, a penetration tester discovers that a user account has a SID History attribute that includes a SID from a privileged group in the old domain. The tester wants to exploit this to gain elevated access in the new domain. What is the most likely attack?
Select an answer first
15foundation · easy
Which of the following is a common technique used to exploit domain trusts?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GPEN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPEN” is a trademark of its owner, used for identification only.