White Hat Apprentice: From Lab to Professional Report Quiz

Quiz: Offensive Active Directory

Pass mark: 70%. You can retry as many times as you need.

1 In an Active Directory environment, which element is considered the real security boundary? Single answer A single organizational unit The domain The forest A group policy

2 Why do graph tools such as BloodHound help both testers and defenders? (several answers) Multiple answers possible It shows chains of relationships that lead from an ordinary account to a privileged group It automatically fixes the misconfigurations it finds It lets defenders identify which relationships to remove to cut short paths It makes written authorization unnecessary because it only reads data

3 What is the essential reason Kerberoasting works against some service accounts? Single answer The Kerberos encryption algorithm has been broken Domain controllers do not log ticket requests at all Service tickets are sent in clear text over the network A service ticket depends on the service account's password and can be guessed offline when that password is weak

4 Which measures reduce the risk of Kerberoasting? (several answers) Multiple answers possible Use group managed service accounts with automatic rotation Disable Kerberos pre-authentication for service accounts Give service accounts only the rights their service requires Monitor for a user requesting many service tickets in a short time

5 What does the administrative tiering model recommend? Single answer Administrators should use one single powerful account for every task to avoid mistakes Accounts of higher tiers must never sign in to machines of lower tiers Domain controllers should also be used as everyday file servers All servers and workstations should share the same local administrator password