CISSP: Certified Information Systems Security Professional

Question

An authentication system using challenge-and-response was recently deployed on an organization's network after its annual penetration test showed that testers could move laterally by using authenticated credentials. Which attack method was MOST likely used to accomplish this?

Explanation

A pass-the-ticket attack reuses a stolen valid Kerberos authentication ticket to access other devices and move laterally without requiring the account password. Challenge-and-response authentication helps resist reuse of captured authentication material by requiring a fresh response to a challenge.

Learn more

Microsoft Defender for Identity XDR security alerts

CISSP: Certified Information Systems Security Professional

AstroTutor

Notes

Readiness

QuestionQ156

Community Discussion