Password Attacks GPEN Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A tester is performing a password spraying attack against a VPN that locks accounts after 5 failed attempts. The tester has a list of 500 usernames and wants to avoid lockouts while testing a set of 10 common passwords. What is the best approach?

   • ATry all 10 passwords against each username consecutively.
   • BUse a brute-force attack on a single account with all 10 passwords.
   • CTry each password against all 500 usernames, then wait 15 minutes before trying the next password.
   • DTry the same password against all usernames, then immediately try the next password without delay.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   An attacker obtains a list of usernames and passwords from a data breach and tries them on a different website. This is an example of which attack?

   • APass-the-hash attack
   • BBrute-force attack
   • CPassword spraying
   • DCredential stuffing
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A tester has captured an NTLM hash for a user and a Kerberos TGT for the same user. The tester needs to access a legacy application that only supports NTLM authentication. Which technique should the tester use?

   • AUse the TGT to request a service ticket for the legacy application.
   • BUse the NTLM hash in a pass-the-hash attack against the legacy application.
   • CUse the TGT in a pass-the-ticket attack against the legacy application.
   • DCrack the NTLM hash to obtain the plaintext password and use it.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A tester is cracking passwords for a company that requires passwords to be at least 8 characters and include a number. The tester has a wordlist of common words. Which attack mode is most likely to produce passwords like 'Summer2024'?

   • ARainbow table attack using a precomputed table for the hash type.
   • BHybrid attack that appends years and numbers to dictionary words.
   • CPassword spraying with 'Summer2024' against all users.
   • DPure brute-force attack over all 8-character combinations.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What does a pass-the-ticket attack involve?

   • AReusing a captured Kerberos ticket to impersonate a user.
   • BGuessing passwords using a wordlist.
   • CUsing a rainbow table to crack hashes.
   • DReusing an NTLM hash to authenticate.
   Reveal Solution Discussion Select an answer first