PenTest+ PT0-003 full analysis: what the $39 report shows

A real question from the full analysis

This is how each question you miss appears in the report. The question, the right answer, the explanation and the source are real. The answer shown as yours is an example, not anyone's data.

A tester enumerates a Windows Active Directory environment and identifies which user accounts have Kerberos pre-authentication disabled, since those accounts are vulnerable to an offline password-cracking technique. Which attack does this enumeration set up?

• A AS-REP roasting
• B Golden ticket attack
• C Pass-the-hash
• D DNS zone transfer

Example answer, marked sure: B · Correct answer: A

AS-REP roasting specifically targets accounts with Kerberos pre-authentication disabled: an attacker can request an AS-REP response for such an account without knowing its password, then crack the returned ticket offline, exactly the vulnerability this enumeration step identifies. A golden ticket attack requires already having compromised the krbtgt account hash, a much later-stage and more privileged attack unrelated to pre-authentication enumeration. Pass-the-hash reuses a captured NTLM hash directly, a different credential-abuse technique. A DNS zone transfer is a reconnaissance technique for retrieving DNS records, unrelated to Kerberos pre-authentication settings.

Readiness by domain uses the weights of the real exam: Engagement Management 13%, Reconnaissance and Enumeration 21%, Vulnerability Discovery and Analysis 17%, Attacks and Exploits 35%, Post-Exploitation and Lateral Movement 14%.