GIAC Exam GPEN Topic 6 Question 60 Discussion

Actual exam question for GIAC's GPEN exam

Question #: 60
Topic #: 6

[All GPEN Questions]

Which of the following statements are true about NTLMv1?

Each correct answer represents a complete solution. Choose all that apply.

AIt uses the LANMAN hash of the user's password.

BIt is mostly used when no Active Directory domain exists.

CIt is a challenge-response authentication protocol.

DIt uses the MD5 hash of the user's password.

Show Suggested Answer

Suggested Answer: A, B, C

by Sarah at Sep 13, 2024, 08:31 PM

Limited Time Offer

25%

Off

Get Premium GPEN Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ozell

3 months ago

NTLMv1? More like NTLMv-Dinosaur, amirite?

upvoted 0 times

...

Kimbery

3 months ago

I bet the person who wrote this question is still using Windows 98. NTLMv1? That's so last century!

upvoted 0 times

Novella

2 months ago

C) It is a challenge-response authentication protocol.

upvoted 0 times

...

Han

2 months ago

B) It is mostly used when no Active Directory domain exists.

upvoted 0 times

...

Titus

2 months ago

A) It uses the LANMAN hash of the user's password.

upvoted 0 times

...

Bette

4 months ago

D) is clearly wrong, MD5? What is this, the 90s? NTLMv1 is all about that LANMAN hash, baby!

upvoted 0 times

Johnetta

3 months ago

C) It is a challenge-response authentication protocol.

upvoted 0 times

...

Tracey

3 months ago

C) It is a challenge-response authentication protocol.

upvoted 0 times

...

Arminda

3 months ago

B) It is mostly used when no Active Directory domain exists.

upvoted 0 times

...

Rachael

3 months ago

A) It uses the LANMAN hash of the user's password.

upvoted 0 times

...

Arlyne

3 months ago

B) It is mostly used when no Active Directory domain exists.

upvoted 0 times

...

Taryn

3 months ago

A) It uses the LANMAN hash of the user's password.

upvoted 0 times

...

Ryan

4 months ago

Ah, I remember learning about NTLMv1 in my security class. It's a challenge-response protocol, and it's often used when there's no Active Directory domain.

upvoted 0 times

Merilyn

3 months ago

User2

upvoted 0 times

...

Johanna

3 months ago

User1

upvoted 0 times

...

Jarvis

4 months ago

I'm pretty sure NTLMv1 uses the LANMAN hash, not MD5. That's definitely the right answer.

upvoted 0 times

...

Anjelica

4 months ago

Actually, you're right. C is the correct answer because NTLMv1 is a challenge-response authentication protocol.

upvoted 0 times

...

Percy

4 months ago

I disagree, I believe C is the correct statement.

upvoted 0 times

...

Anjelica

4 months ago

I think A and B are true about NTLMv1.

upvoted 0 times

...