Análisis completo de PenTest+ PT0-003: lo que muestra el informe de US$39

Una pregunta real del análisis completo

Así aparece en el informe cada pregunta que fallas. La pregunta, la respuesta correcta, la explicación y la fuente son reales. La respuesta que se muestra como tuya es un ejemplo, no son datos de nadie.

A tester enumerates a Windows Active Directory environment and identifies which user accounts have Kerberos pre-authentication disabled, since those accounts are vulnerable to an offline password-cracking technique. Which attack does this enumeration set up?

• A AS-REP roasting
• B Golden ticket attack
• C Pass-the-hash
• D DNS zone transfer

Respuesta de ejemplo, marcada como segura: B · Respuesta correcta: A

AS-REP roasting specifically targets accounts with Kerberos pre-authentication disabled: an attacker can request an AS-REP response for such an account without knowing its password, then crack the returned ticket offline, exactly the vulnerability this enumeration step identifies. A golden ticket attack requires already having compromised the krbtgt account hash, a much later-stage and more privileged attack unrelated to pre-authentication enumeration. Pass-the-hash reuses a captured NTLM hash directly, a different credential-abuse technique. A DNS zone transfer is a reconnaissance technique for retrieving DNS records, unrelated to Kerberos pre-authentication settings.

La preparación por dominio usa los pesos del examen real: Engagement Management 13%, Reconnaissance and Enumeration 21%, Vulnerability Discovery and Analysis 17%, Attacks and Exploits 35%, Post-Exploitation and Lateral Movement 14%.