Leveraging the Domain GRTP Practice Questions (Page 13)

Questions 61–65

1. 61foundation · easy

   What is the primary purpose of credential dumping from LSASS?

   • ATo extract plaintext passwords or hashes from memory
   • BTo modify group policies
   • CTo enumerate network shares
   • DTo list running processes
   Reveal Solution Discussion Select an answer first
2. 62foundation · easy

   What is privilege escalation via misconfigured ACLs?

   • AAbusing overly permissive permissions on AD objects to gain elevated access
   • BCracking a password hash
   • CUsing a phishing email
   • DExploiting a buffer overflow
   Reveal Solution Discussion Select an answer first
4. 63application · medium

   You have enumerated Active Directory and found that a low-privileged account has 'GenericAll' permission on a user object that is a member of a privileged group. What is the most effective way to escalate privileges?

   • AModify the user object's attributes to add your account to a privileged group
   • BCreate a GPO linked to the user's OU
   • CPerform a Kerberoasting attack on the user object
   • DUse DCSync to replicate the user's hash
   Reveal Solution Discussion Select an answer first
5. 64foundation · easy

   What does a DCSync attack simulate to obtain password hashes?

   • AA service requesting a ticket
   • BA backup of the NTDS.dit file
   • CA domain controller performing replication
   • DA user logging in with Kerberos
   Reveal Solution Discussion Select an answer first
6. 65foundation · easy

   What is the difference between DCSync and NTDS.dit extraction?

   • ADCSync requires physical access
   • BNTDS.dit extraction is faster
   • CDCSync uses replication, while NTDS.dit extraction requires file access
   • DThey are the same attack
   Reveal Solution Discussion Select an answer first