What is the primary purpose of a pass-the-ticket (PtT) attack?

To disable Kerberos pre-authentication

To create a golden ticket using the KRBTGT hash

To reuse Kerberos tickets to authenticate as a user without knowing their password

What is the purpose of a domain trust relationship?

To allow users in one domain to access resources in another domain

To replicate directory data between domains

To create a single security boundary across multiple forests

To synchronize passwords between domains

You have compromised a server that is configured for constrained delegation to a specific service (e.g., CIFS) on a target server. You need to impersonate a domain user who has access to the target service. The user is not currently authenticated to your compromised server. Which technique should you use?

Use a skeleton key on the target server to authenticate as the user.

Use a silver ticket for the target service using the service account's hash.

Use the constrained delegation permission to request a service ticket for the target service on behalf of the user using S4U2Self and S4U2Proxy.

Use a golden ticket using the KRBTGT hash.

In an Active Directory environment, what is the fundamental purpose of an organizational unit (OU)?

To replicate directory data between domain controllers within a site

To establish trust relationships between separate Active Directory forests

To contain objects such as users, groups, and computers for administrative delegation and Group Policy application

To define the security boundary between different administrative domains

What is the main difference between a golden ticket and a silver ticket attack?

A silver ticket requires the KRBTGT hash, while a golden ticket requires the service account hash

A golden ticket only works for a single service, while a silver ticket works for all services

A golden ticket forges a TGT, while a silver ticket forges a service ticket for a specific service

A silver ticket is used for NTLM authentication, while a golden ticket is used for Kerberos

GIAC Red Team Professional

Domain 3Objective 1

Attacking Active Directory GRTP Practice Questions (Page 1)

Part of the Active Directory Attacks and Post-Exploitation domain, which makes up ~33% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~23–40 in this domain), expect 8–13 from this objective — we provide 61 practice questions to prepare you well beyond it. (estimate)

61questions here

13free pages

19concepts

Questions 1–5

1foundation · easy
What is the primary purpose of a pass-the-ticket (PtT) attack?
Select an answer first
2foundation · easy
What is the purpose of a domain trust relationship?
Select an answer first
3expert · hard
You have compromised a server that is configured for constrained delegation to a specific service (e.g., CIFS) on a target server. You need to impersonate a domain user who has access to the target service. The user is not currently authenticated to your compromised server. Which technique should you use?
Select an answer first
4foundation · easy
In an Active Directory environment, what is the fundamental purpose of an organizational unit (OU)?
Select an answer first
5foundation · easy
What is the main difference between a golden ticket and a silver ticket attack?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GRTP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GRTP” is a trademark of its owner, used for identification only.