What is the primary risk of performing a Kerberos password spraying attack?

Obtaining service tickets that are encrypted with weak ciphers

Causing the KDC to crash due to too many requests

Generating excessive network traffic that alerts defenders

Locking out user accounts due to failed login attempts

Which type of account is specifically targeted in a Kerberoasting attack?

Accounts with a Service Principal Name (SPN) set

Accounts with 'Do not require Kerberos preauthentication' enabled

Accounts with administrative privileges in the domain

Accounts that have never logged on to the domain

What is required to forge a Golden Ticket?

The domain administrator's password

The KRBTGT account's password hash

A service account's password hash

What is the main objective of a Pass-the-Ticket attack?

Forge a new TGT using the KRBTGT hash

Reuse a captured Kerberos ticket to authenticate as the user without knowing their password

Crack a service ticket to recover the service account password

Downgrade Kerberos encryption to a weaker cipher

You have compromised a server that is configured for unconstrained delegation. You want to impersonate a domain admin who authenticates to this server. Which attack should you use?

Capture the admin's TGT from the server's memory and use pass-the-ticket.

Forge a silver ticket for the server's service.

Perform Kerberoasting against the admin's account.

Use AS-REP roasting against the admin's account.

GIAC Penetration Tester (GPEN)

Domain 4Objective 1

Kerberos Attacks GPEN Practice Questions (Page 1)

Part of the Active Directory Attacks domain, which makes up ~15% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–18 in this domain), expect 6–9 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

12concepts

Questions 1–5

1foundation · easy
What is the primary risk of performing a Kerberos password spraying attack?
Select an answer first
2foundation · easy
Which type of account is specifically targeted in a Kerberoasting attack?
Select an answer first
3foundation · easy
What is required to forge a Golden Ticket?
Select an answer first
4foundation · easy
What is the main objective of a Pass-the-Ticket attack?
Select an answer first
5application · medium
You have compromised a server that is configured for unconstrained delegation. You want to impersonate a domain admin who authenticates to this server. Which attack should you use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GPEN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPEN” is a trademark of its owner, used for identification only.