You have a Meterpreter session on a Windows server as a local admin. You need to move laterally to a domain controller, but the target has SMB signing enforced and you do not have the domain admin password. You have a valid Kerberos TGT for a domain admin in memory. Which approach is most appropriate?

Use the TGT to request a service ticket for the domain controller and inject it into your session, then use PsExec with the ticket.

Use a pass-the-hash attack with the local admin hash.

Disable SMB signing on the target using a remote command.

Use a brute-force attack to guess the domain admin password.

Which of the following is a common Linux privilege escalation technique that involves abusing scheduled tasks?

Exploiting a kernel vulnerability

Using the 'sudo -l' command to list allowed commands

Performing a pass-the-hash attack

Which of the following is a common Windows privilege escalation technique that involves exploiting a service that runs with SYSTEM privileges but has a weak file permission?

Weak service executable permissions

GIAC Penetration Tester (GPEN)

Domain 2Objective 2

Escalation and Exploitation GPEN Practice Questions (Page 8)

Part of the Exploitation and Post-Exploitation domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–26 in this domain), expect 4–7 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

8concepts

Questions 36–38

36expert · hard
You have a Meterpreter session on a Windows server as a local admin. You need to move laterally to a domain controller, but the target has SMB signing enforced and you do not have the domain admin password. You have a valid Kerberos TGT for a domain admin in memory. Which approach is most appropriate?
Select an answer first
37foundation · easy
Which of the following is a common Linux privilege escalation technique that involves abusing scheduled tasks?
Select an answer first
38foundation · easy
Which of the following is a common Windows privilege escalation technique that involves exploiting a service that runs with SYSTEM privileges but has a weak file permission?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GPEN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPEN” is a trademark of its owner, used for identification only.

Escalation and Exploitation GPEN Practice Questions (Page 8)

Questions 36–38

Which of the following is a common Linux privilege escalation technique that involves abusing scheduled tasks?

Which of the following is a common Windows privilege escalation technique that involves exploiting a service that runs with SYSTEM privileges but has a weak file permission?

Keep studying — Exploitation and Post-Exploitation