Which of the following is a common defensive evasion technique used in Active Directory attacks?

Using default administrative tools

Using a VPN for all connections

Clearing event logs after performing actions

Performing attacks during business hours

What is the primary goal of an ACL abuse attack in Active Directory?

To exploit misconfigured permissions on AD objects to gain unauthorized privileges

To disable auditing on domain controllers

To install a backdoor on domain controllers

To crack password hashes obtained from network traffic

What is the primary goal of a DCSync attack?

To enumerate all users in the domain via LDAP

To replicate directory data from a domain controller to extract password hashes

To install a skeleton key on a domain controller

To create a golden ticket using the KRBTGT hash

In an overpass-the-hash attack, what does the attacker do with the NTLM hash?

Uses it to decrypt captured service tickets

Uses it to request a Kerberos TGT from the domain controller

Uses it to perform a DCSync attack

Uses it to forge a golden ticket

GIAC Red Team Professional

Domain 3Objective 1

Attacking Active Directory GRTP Practice Questions (Page 7)

Part of the Active Directory Attacks and Post-Exploitation domain, which makes up ~33% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~23–40 in this domain), expect 8–13 from this objective — we provide 61 practice questions to prepare you well beyond it. (estimate)

61questions here

13free pages

19concepts

Questions 31–35

31foundation · easy
Which of the following is a common defensive evasion technique used in Active Directory attacks?
Select an answer first
32foundation · easy
What is the primary goal of an ACL abuse attack in Active Directory?
Select an answer first
33foundation · easy
What is the primary goal of a DCSync attack?
Select an answer first
34foundation · easy
In an overpass-the-hash attack, what does the attacker do with the NTLM hash?
Select an answer first
35foundation · easy
Which authentication protocol is primarily exploited in a pass-the-hash attack?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GRTP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GRTP” is a trademark of its owner, used for identification only.