A security analyst is investigating a breach where an attacker gained access to a Windows domain controller and captured network traffic. The attacker then used a captured hash to authenticate to other systems without knowing the plaintext password. Which attack technique was used?

Golden ticket attack, forging Kerberos tickets

Pass the hash attack, using the captured NTLM hash to authenticate

Timing attack, measuring authentication response times

Kerberoasting, requesting service tickets for offline cracking

A network administrator is concerned about an attacker intercepting and modifying communications between two servers that use a legacy protocol without proper authentication. Which attack is the administrator most concerned about?

Brute force attack, trying all possible session keys

Fault injection attack, inducing errors in the servers' cryptographic hardware

Ransomware attack, encrypting the servers' data

Man-in-the-Middle (MITM) attack, where the attacker intercepts and alters communications between the two servers

Certified Information Systems Security Professional

Domain 3Objective 7

3.7 - Understand Methods of Cryptanalytic Attacks CISSP Practice Questions (Page 9)

Part of the Security Architecture and Engineering domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–2 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

13concepts

13%of the exam

Questions 41–42

41application · medium
A security analyst is investigating a breach where an attacker gained access to a Windows domain controller and captured network traffic. The attacker then used a captured hash to authenticate to other systems without knowing the plaintext password. Which attack technique was used?
Select an answer first
42application · medium
A network administrator is concerned about an attacker intercepting and modifying communications between two servers that use a legacy protocol without proper authentication. Which attack is the administrator most concerned about?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

3.7 - Understand Methods of Cryptanalytic Attacks CISSP Practice Questions (Page 9)

Questions 41–42

A security analyst is investigating a breach where an attacker gained access to a Windows domain controller and captured network traffic. The attacker then used a captured hash to authenticate to other systems without knowing the plaintext password. Which attack technique was used?

A network administrator is concerned about an attacker intercepting and modifying communications between two servers that use a legacy protocol without proper authentication. Which attack is the administrator most concerned about?

Keep studying — Security Architecture and Engineering