GIAC GPEN Exam - Topic 6 Question 60 Discussion

Actual exam question for GIAC's GPEN exam

Question #: 60
Topic #: 6

[All GPEN Questions]

Which of the following statements are true about NTLMv1?

Each correct answer represents a complete solution. Choose all that apply.

AIt uses the LANMAN hash of the user's password.

BIt is mostly used when no Active Directory domain exists.

CIt is a challenge-response authentication protocol.

DIt uses the MD5 hash of the user's password.

Show Suggested Answer

Suggested Answer: A, B, C

by Sarah at Sep 13, 2024, 08:31 PM

Limited Time Offer

25%

Off

Get Premium GPEN Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kenia

6 months ago

Really? I thought NTLMv1 was outdated, surprised it's still relevant!

upvoted 0 times

...

Angelica

6 months ago

Wait, D is false, it doesn't use MD5.

upvoted 0 times

...

Dalene

6 months ago

C is correct, challenge-response is how it works.

upvoted 0 times

...

Isadora

7 months ago

Totally agree, B is spot on too!

upvoted 0 times

...

Laticia

7 months ago

A is true, it uses the LANMAN hash.

upvoted 0 times

...

Peggy

7 months ago

I’m pretty certain NTLMv1 doesn’t use MD5; I think that’s more related to other protocols.

upvoted 0 times

...

Toi

7 months ago

I practiced a similar question, and I believe NTLMv1 is indeed a challenge-response protocol.

upvoted 0 times

...

Denna

8 months ago

I think NTLMv1 is used when there's no Active Directory, but I can't recall if that's the main reason.

upvoted 0 times

...

Marvel

8 months ago

I remember NTLMv1 uses the LANMAN hash, but I'm not sure if that's the only thing we need to consider.

upvoted 0 times

...

Ashley

8 months ago

This question seems pretty straightforward. I'll just go with my initial instincts on this one.

upvoted 0 times

...

Lynelle

8 months ago

I'm confident I know the basics of NTLMv1, but I want to double-check my understanding before submitting my answers.

upvoted 0 times

...

Tula

8 months ago

Okay, I remember that NTLMv1 is a challenge-response protocol, so that's one I can definitely select.

upvoted 0 times

...

Andree

8 months ago

This question looks straightforward. I'll start by reviewing the key details about NTLMv1 that I know.

upvoted 0 times

...

Gennie

8 months ago

Hmm, I'm a bit unsure about the differences between LANMAN and MD5 hashes. I'll need to think through that carefully.

upvoted 0 times

...

Dianne

8 months ago

Hmm, I'm a bit unsure about this one. I'll need to review the documentation on event processing in Alfresco to make sure I understand the trade-offs.

upvoted 0 times

...

Ozell

1 year ago

NTLMv1? More like NTLMv-Dinosaur, amirite?

upvoted 0 times

...

Kimbery

1 year ago

I bet the person who wrote this question is still using Windows 98. NTLMv1? That's so last century!

upvoted 0 times

Novella

11 months ago

C) It is a challenge-response authentication protocol.

upvoted 0 times

...

Han

12 months ago

B) It is mostly used when no Active Directory domain exists.

upvoted 0 times

...

Titus

12 months ago

A) It uses the LANMAN hash of the user's password.

upvoted 0 times

...

Bette

1 year ago

D) is clearly wrong, MD5? What is this, the 90s? NTLMv1 is all about that LANMAN hash, baby!

upvoted 0 times

Johnetta

1 year ago

C) It is a challenge-response authentication protocol.

upvoted 0 times

...

Tracey

1 year ago

C) It is a challenge-response authentication protocol.

upvoted 0 times

...

Arminda

1 year ago

B) It is mostly used when no Active Directory domain exists.

upvoted 0 times

...

Rachael

1 year ago

A) It uses the LANMAN hash of the user's password.

upvoted 0 times

...

Arlyne

1 year ago

B) It is mostly used when no Active Directory domain exists.

upvoted 0 times

...

Taryn

1 year ago

A) It uses the LANMAN hash of the user's password.

upvoted 0 times

...

Ryan

1 year ago

Ah, I remember learning about NTLMv1 in my security class. It's a challenge-response protocol, and it's often used when there's no Active Directory domain.

upvoted 0 times

Merilyn

1 year ago

User2

upvoted 0 times

...

Johanna

1 year ago

User1

upvoted 0 times

...

Jarvis

1 year ago

I'm pretty sure NTLMv1 uses the LANMAN hash, not MD5. That's definitely the right answer.

upvoted 0 times

...

Anjelica

1 year ago

Actually, you're right. C is the correct answer because NTLMv1 is a challenge-response authentication protocol.

upvoted 0 times

...

Percy

1 year ago

I disagree, I believe C is the correct statement.

upvoted 0 times

...

Anjelica

1 year ago

I think A and B are true about NTLMv1.

upvoted 0 times

...