You have a list of domain usernames and need to test a small set of common passwords against them. You want to avoid locking out accounts. Which technique is most appropriate?

Use Kerberoasting to obtain hashes for all users.

Perform a brute force attack trying many passwords for each user.

Use AS-REP roasting to retrieve hashes for all users.

Perform a password spray using one password at a time across all users.

In a Pass-the-Ticket attack, what type of Kerberos ticket is typically used to impersonate a user?

PAC (Privilege Attribute Certificate)

GIAC Red Team Professional

Domain 3Objective 2

Leveraging the Domain GRTP Practice Questions (Page 1)

Part of the Active Directory Attacks and Post-Exploitation domain, which makes up ~33% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~23–40 in this domain), expect 8–13 from this objective — we provide 65 practice questions to prepare you well beyond it. (estimate)

65questions here

13free pages

25concepts

Questions 1–5

1application · medium
You have a list of domain usernames and need to test a small set of common passwords against them. You want to avoid locking out accounts. Which technique is most appropriate?
Select an answer first
2foundation · easy
Which Windows API or LDAP query mechanism is commonly used to enumerate domain trust relationships programmatically?
Select an answer first
3foundation · easy
In a Pass-the-Ticket attack, what type of Kerberos ticket is typically used to impersonate a user?
Select an answer first
4foundation · easy
During domain enumeration, which native Windows command-line tool can be used to list all domain users, groups, and computers by querying the domain controller?
Select an answer first
5foundation · easy
In a Pass-the-Hash attack, what is used to authenticate to a remote system?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GRTP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GRTP” is a trademark of its owner, used for identification only.

Leveraging the Domain GRTP Practice Questions (Page 1)

Questions 1–5

You have a list of domain usernames and need to test a small set of common passwords against them. You want to avoid locking out accounts. Which technique is most appropriate?

Which Windows API or LDAP query mechanism is commonly used to enumerate domain trust relationships programmatically?

In a Pass-the-Ticket attack, what type of Kerberos ticket is typically used to impersonate a user?

During domain enumeration, which native Windows command-line tool can be used to list all domain users, groups, and computers by querying the domain controller?

In a Pass-the-Hash attack, what is used to authenticate to a remote system?

Keep studying — Active Directory Attacks and Post-Exploitation