OSEP Advanced Lateral Movement Quiz

Reviewed by Editorial Team
The ProProfs editorial team is comprised of experienced subject matter experts. They've collectively created over 10,000 quizzes and lessons, serving over 100 million users. Our team includes in-house content moderators and subject matter experts, as well as a global network of rigorously trained contributors. All adhere to our comprehensive editorial guidelines, ensuring the delivery of high-quality content.
Learn about Our Editorial Process
| By Thames
T
Thames
Community Contributor
Quizzes Created: 8865 | Total Attempts: 106,055
| Questions: 20 | Updated: Aug 15, 2026
Please wait...
Question 1 / 21
🏆 Rank #-- ▾
0 %
0/100
Score 0/100

1. Which protocol is vulnerable to NTLM relay attacks when signing is not enforced?

Submit
Please wait...
About This Quiz
OSEP Advanced Lateral Movement Quiz - Quiz

Test your understanding of advanced lateral movement techniques in Windows and Active Directory environments. This quiz covers credential theft, pass-the-hash attacks, Kerberos exploitation, and post-exploitation strategies essential for OSEP certification. Evaluate your knowledge of attack chains, detection evasion, and privilege escalation methods used by security professionals.

2.

What first name or nickname would you like us to use?

You may optionally provide this to label your report, leaderboard, or certificate.

2. Which Windows service is often abused for lateral movement due to its ability to execute commands remotely?

Submit

3. In lateral movement, what does the term 'living off the land' refer to?

Submit

4. What is ASREProasting an attack against?

Submit

5. Which attack targets service accounts with weak passwords by requesting and cracking their service tickets?

Submit

6. What is the primary difference between a TGT and a service ticket in Kerberos?

Submit

7. Which tool can be used to perform NTLM relay attacks by intercepting and relaying authentication?

Submit

8. In lateral movement, what is the primary benefit of using legitimate credentials over injecting shellcode?

Submit

9. Which Active Directory feature allows users to delegate their credentials to a service?

Submit

10. What is a common method to achieve RCE on a remote system after obtaining valid credentials?

Submit

11. Which attack allows an attacker to reuse a user's NTLM hash to authenticate without knowing the plaintext password?

Submit

12. What is the primary purpose of NTLM relay attacks in lateral movement?

Submit

13. Which attack exploits unconstrained delegation to compromise domain controllers?

Submit

14. In Windows, constrained delegation allows a service to impersonate users for which purpose?

Submit

15. What is the primary advantage of using a Silver Ticket over a Golden Ticket?

Submit

16. Which credential dumping technique reads memory directly from the LSASS process?

Submit

17. What does LSASS stand for in Windows security context?

Submit

18. In a Kerberoasting attack, what type of service account ticket is targeted?

Submit

19. Which tool is commonly used to extract NTLM hashes from the SAM database on a compromised Windows system?

Submit

20. What is the primary purpose of a Golden Ticket attack in Active Directory?

Submit
×
Saved
Thank you for your feedback!
View My Results
Cancel
  • All
    All (20)
  • Unanswered
    Unanswered ()
  • Answered
    Answered ()
Which protocol is vulnerable to NTLM relay attacks when signing is not...
Which Windows service is often abused for lateral movement due to its...
In lateral movement, what does the term 'living off the land' refer...
What is ASREProasting an attack against?
Which attack targets service accounts with weak passwords by...
What is the primary difference between a TGT and a service ticket in...
Which tool can be used to perform NTLM relay attacks by intercepting...
In lateral movement, what is the primary benefit of using legitimate...
Which Active Directory feature allows users to delegate their...
What is a common method to achieve RCE on a remote system after...
Which attack allows an attacker to reuse a user's NTLM hash to...
What is the primary purpose of NTLM relay attacks in lateral movement?
Which attack exploits unconstrained delegation to compromise domain...
In Windows, constrained delegation allows a service to impersonate...
What is the primary advantage of using a Silver Ticket over a Golden...
Which credential dumping technique reads memory directly from the...
What does LSASS stand for in Windows security context?
In a Kerberoasting attack, what type of service account ticket is...
Which tool is commonly used to extract NTLM hashes from the SAM...
What is the primary purpose of a Golden Ticket attack in Active...
play-Mute sad happy unanswered_answer up-hover down-hover success oval cancel Check box square blue
Alert!