Lateral Movement Quiz: Can You Pivot Through The Network?

1. What is a 'jump box' or 'pivot host' in lateral movement?

A firewall rule that blocks lateral connections

A compromised system used as an intermediary to access other systems

A network monitoring tool

A backup domain controller

2. True or False: Detection of lateral movement is easier when network segmentation is properly implemented.

True

False

3. In lateral movement, what is the purpose of enumerating Active Directory trust relationships?

To identify additional domains or forests to pivot into

To block unauthorized access

To encrypt network traffic

To generate security alerts

4. Which network protocol is commonly exploited for lateral movement in environments with weak segmentation?

HTTPS

SMB/CIFS

SMTP

POP3

5. What does 'credential reuse' mean in lateral movement attacks?

Using the same password across multiple user accounts

Harvesting and reusing valid credentials on other systems

Creating fake credentials for testing

Rotating credentials every hour

6. True or False: Lateral movement requires the attacker to have domain administrator privileges from the start.

True

False

7. Which lateral movement technique uses scheduled tasks to execute commands on remote systems?

WMI event subscription

Task Scheduler remote execution

SSH tunneling

VPN pivoting

8. What is the primary risk of using default or weak service account credentials?

They are easily guessed, enabling lateral movement

They trigger immediate network alerts

They are stored in plaintext only

They cannot access file shares

9. In a Windows domain, which protocol is exploited by Kerberoasting attacks for lateral movement?

LDAP

NTLM

Kerberos

RADIUS

10. Which attack involves stealing and reusing authentication tokens without cracking passwords?

Brute force attack

Dictionary attack

Token theft

Rainbow table attack

11. What is the primary goal of lateral movement in a penetration test?

To gain initial access to the network

To move from a compromised host to other systems on the network

To establish a persistent backdoor

To generate false network alerts

12. True or False: Lateral movement typically occurs before privilege escalation in a penetration test.

True

False

13. Which tool is commonly used to harvest credentials from LSASS memory for lateral movement?

Mimikatz

Wireshark

Nessus

Metasploit Framework

14. What is the primary purpose of network reconnaissance during lateral movement?

To trigger intrusion detection systems

To identify additional targets and trust relationships

To establish encrypted tunnels

To delete audit logs

15. Which Windows utility is frequently abused for lateral movement via remote command execution?

PowerShell Remoting (WinRM)

Windows Defender

Task Scheduler

Event Viewer

16. In lateral movement, what does 'living off the land' refer to?

Using only network cables for connectivity

Exploiting built-in OS tools to avoid detection

Accessing only non-networked systems

Relying solely on social engineering

17. What is the primary advantage of using a compromised service account for lateral movement?

It requires no password changes

It typically has elevated privileges across multiple systems

It cannot be detected by antivirus software

It allows direct access to the domain controller

18. Which protocol is commonly targeted for lateral movement using pass-the-ticket attacks?

HTTP

Kerberos

DNS

SNMP

19. What does 'pivoting' mean in the context of network penetration testing?

Rotating IP addresses to evade detection

Using a compromised host as a launching point to attack other systems

Changing attack vectors mid-engagement

Deploying multiple backdoors simultaneously

20. Which technique involves using compromised credentials to access other systems?

Pass-the-hash

Credential stuffing

Kerberoasting

DNS poisoning

Lateral Movement Quiz: Can You Pivot Through the Network?

1. What is a 'jump box' or 'pivot host' in lateral movement?

2.

What first name or nickname would you like us to use?

2. True or False: Detection of lateral movement is easier when network segmentation is properly implemented.

3. In lateral movement, what is the purpose of enumerating Active Directory trust relationships?

4. Which network protocol is commonly exploited for lateral movement in environments with weak segmentation?

5. What does 'credential reuse' mean in lateral movement attacks?

6. True or False: Lateral movement requires the attacker to have domain administrator privileges from the start.

7. Which lateral movement technique uses scheduled tasks to execute commands on remote systems?

8. What is the primary risk of using default or weak service account credentials?

9. In a Windows domain, which protocol is exploited by Kerberoasting attacks for lateral movement?

10. Which attack involves stealing and reusing authentication tokens without cracking passwords?

11. What is the primary goal of lateral movement in a penetration test?

12. True or False: Lateral movement typically occurs before privilege escalation in a penetration test.

13. Which tool is commonly used to harvest credentials from LSASS memory for lateral movement?

14. What is the primary purpose of network reconnaissance during lateral movement?

15. Which Windows utility is frequently abused for lateral movement via remote command execution?

16. In lateral movement, what does 'living off the land' refer to?

17. What is the primary advantage of using a compromised service account for lateral movement?

18. Which protocol is commonly targeted for lateral movement using pass-the-ticket attacks?

19. What does 'pivoting' mean in the context of network penetration testing?

20. Which technique involves using compromised credentials to access other systems?