Block 2 Theoretical Quiz 1

Block 2 Theoretical Quiz 1

What information is encrypted in a Authentication Request (AS-REQ)?

1: What information is encrypted in a Authentication Request (AS-REQ)?

Ticket

Timestamp

Username

Password hash

Which step in the Kerberos process does Kerberoasting target?

2: Which step in the Kerberos process does Kerberoasting target?

AS-REQ

AS-REP

TGS-REP

TGS-REQ

How can you Kerberoast without an account?

3: How can you Kerberoast without an account?

By requesting a ST with a forged AS-REQ

By brute forcing SPNs

By requesting a ST with a TGT from ASRepRoasting

By adding a fake computer to the domain

Which kind of delegation allows the service to impersonate a user for any other service?

4: Which kind of delegation allows the service to impersonate a user for any other service?

Resource-Based Constrained

Unconstrained

Constrained

All of the above

Which computer attribute is used for Constrained Delegation?

5: Which computer attribute is used for Constrained Delegation?

SeEnableDelegationPrivilege

msDS-AllowedToActOnBehalfOfOtherIdentity

TRUSTED_FOR_DELEGATION

msDS-AllowedToDelegateTo

Why is protocol transition used for?

6: Why is protocol transition used for?

To enable Unconstrained Delegation

To allow Kerberos services to use NTLM authentication

To impersonate a different user

To allow HTTP requests to access SQL servers

Which attack does coercing a DC to connect to a server with Unconstrained Delegation allow you to conduct?

7: Which attack does coercing a DC to connect to a server with Unconstrained Delegation allow you to conduct?

DCSync

Silver Ticket

Golden Ticket

ExtraSIDs

A user has the TRUSTED_FOR_DELEGATION User Account Control attribute. Which attack can they conduct?

8: A user has the TRUSTED_FOR_DELEGATION User Account Control attribute. Which attack can they conduct?

Unconstrained Delegation

Resource-Based Constrained Delegation

Constrained Delegation

Kerberoast

How can you exploit a user with the TRUSTED_FOR_DELEGATION UAC attribute?

9: How can you exploit a user with the TRUSTED_FOR_DELEGATION UAC attribute?

By coercing a Domain Controller

By adding the DC to the delegation attribute

By creating a fake computer and registering an SPN

By creating a golden ticket

What information is contained in a AP-REQ?

10: What information is contained in a AP-REQ?

A ST and an authenticator

A TGT and a ST

A TGT and an authenticator

A TGS-REQ and a TGT

Which of the following is an indicator of a kerberoasting attack?

11: Which of the following is an indicator of a kerberoasting attack?

Fake username in the ticket

TGT Request

Ticket request for a RC4-HMAC encrypted ticket

10 year expiry of ticket

What is the Configuration Naming Context repository used for?

12: What is the Configuration Naming Context repository used for?

NTLM relay attacks

Trust configuration information

Forest configuration information

Domain configuration information

What is an External Trust used for?

13: What is an External Trust used for?

To allow users from one forest to access another forest

Allow users from a domain in one forest to access a domain in a separate forest

Allow users in a parent domain to access a child domain

Connect a windows domain to a non-windows domain

How can you attack trusts that have SID filtering enabled?