GIAC GPEN Exam - Topic 6 Question 60 Discussion

Actual exam question for GIAC's GPEN exam

Question #: 60
Topic #: 6

[All GPEN Questions]

Which of the following statements are true about NTLMv1?

Each correct answer represents a complete solution. Choose all that apply.

AIt uses the LANMAN hash of the user's password.

BIt is mostly used when no Active Directory domain exists.

CIt is a challenge-response authentication protocol.

DIt uses the MD5 hash of the user's password.

Show Suggested Answer

Suggested Answer: A, B, C

by Sarah at Sep 13, 2024, 08:31 PM

Limited Time Offer

25%

Off

Get Premium GPEN Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kenia

3 months ago

Really? I thought NTLMv1 was outdated, surprised it's still relevant!

upvoted 0 times

...

Angelica

3 months ago

Wait, D is false, it doesn't use MD5.

upvoted 0 times

...

Dalene

3 months ago

C is correct, challenge-response is how it works.

upvoted 0 times

...

Isadora

4 months ago

Totally agree, B is spot on too!

upvoted 0 times

...

Laticia

4 months ago

A is true, it uses the LANMAN hash.

upvoted 0 times

...

Peggy

4 months ago

I’m pretty certain NTLMv1 doesn’t use MD5; I think that’s more related to other protocols.

upvoted 0 times

...

Toi

4 months ago

I practiced a similar question, and I believe NTLMv1 is indeed a challenge-response protocol.

upvoted 0 times

...

Denna

4 months ago

I think NTLMv1 is used when there's no Active Directory, but I can't recall if that's the main reason.

upvoted 0 times

...

Marvel

5 months ago

I remember NTLMv1 uses the LANMAN hash, but I'm not sure if that's the only thing we need to consider.

upvoted 0 times

...

Ashley

5 months ago

This question seems pretty straightforward. I'll just go with my initial instincts on this one.

upvoted 0 times

...

Lynelle

5 months ago

I'm confident I know the basics of NTLMv1, but I want to double-check my understanding before submitting my answers.

upvoted 0 times

...

Tula

5 months ago

Okay, I remember that NTLMv1 is a challenge-response protocol, so that's one I can definitely select.

upvoted 0 times

...

Andree

5 months ago

This question looks straightforward. I'll start by reviewing the key details about NTLMv1 that I know.

upvoted 0 times

...

Gennie

5 months ago

Hmm, I'm a bit unsure about the differences between LANMAN and MD5 hashes. I'll need to think through that carefully.

upvoted 0 times

...

Dianne

5 months ago

Hmm, I'm a bit unsure about this one. I'll need to review the documentation on event processing in Alfresco to make sure I understand the trade-offs.

upvoted 0 times

...

Ozell

9 months ago

NTLMv1? More like NTLMv-Dinosaur, amirite?

upvoted 0 times

...

Kimbery

9 months ago

I bet the person who wrote this question is still using Windows 98. NTLMv1? That's so last century!

upvoted 0 times

Novella

8 months ago

C) It is a challenge-response authentication protocol.

upvoted 0 times

...

Han

8 months ago

B) It is mostly used when no Active Directory domain exists.

upvoted 0 times

...

Titus

9 months ago

A) It uses the LANMAN hash of the user's password.

upvoted 0 times

...

Bette

10 months ago

D) is clearly wrong, MD5? What is this, the 90s? NTLMv1 is all about that LANMAN hash, baby!

upvoted 0 times

Johnetta

9 months ago

C) It is a challenge-response authentication protocol.

upvoted 0 times

...

Tracey

9 months ago

C) It is a challenge-response authentication protocol.

upvoted 0 times

...

Arminda

10 months ago

B) It is mostly used when no Active Directory domain exists.

upvoted 0 times

...

Rachael

10 months ago

A) It uses the LANMAN hash of the user's password.

upvoted 0 times

...

Arlyne

10 months ago

B) It is mostly used when no Active Directory domain exists.

upvoted 0 times

...

Taryn

10 months ago

A) It uses the LANMAN hash of the user's password.

upvoted 0 times

...

Ryan

10 months ago

Ah, I remember learning about NTLMv1 in my security class. It's a challenge-response protocol, and it's often used when there's no Active Directory domain.

upvoted 0 times

Merilyn

10 months ago

User2

upvoted 0 times

...

Johanna

10 months ago

User1

upvoted 0 times

...

Jarvis

11 months ago

I'm pretty sure NTLMv1 uses the LANMAN hash, not MD5. That's definitely the right answer.

upvoted 0 times

...

Anjelica

11 months ago

Actually, you're right. C is the correct answer because NTLMv1 is a challenge-response authentication protocol.

upvoted 0 times

...

Percy

11 months ago

I disagree, I believe C is the correct statement.

upvoted 0 times

...

Anjelica

11 months ago

I think A and B are true about NTLMv1.

upvoted 0 times

...