GIAC Certification GIAC Certified Penetration Tester 3

Question 1

Which framework provides a structured methodology for penetration testing including pre-engagement, intelligence gathering, and reporting phases?

Accepted Answer

PTES

Answer

The Penetration Testing Execution Standard (PTES) defines seven phases of a penetration test from pre-engagement through reporting.

Question 2

What Windows feature, when enabled, stores domain credentials in plaintext in LSASS memory?

Accepted Answer

WDigest Authentication

Answer

WDigest Authentication, when enabled on older Windows systems, stores credentials in plaintext in LSASS memory for legacy protocol support.

Question 3

During a penetration test, which Nmap script category checks for known vulnerabilities on discovered services?

Accepted Answer

vuln

Answer

The Nmap 'vuln' script category runs scripts that check for specific known vulnerabilities against discovered services.

Question 4

What type of penetration test provides the tester with no prior knowledge of the target environment?

Accepted Answer

Black box

Answer

A black box penetration test simulates an external attacker with no prior knowledge, credentials, or documentation of the target.

Question 5

Which Active Directory attack forges Kerberos tickets using a compromised domain controller's KRBTGT account hash?

Accepted Answer

Golden Ticket

Answer

A Golden Ticket attack forges valid Kerberos TGTs using the KRBTGT hash, granting persistent domain-level access.

GIAC Certification Practice Test