Module 4 Assessment: Golden and Silver Tickets

Instructions

This assessment consists of multiple-choice questions, scenario-based questions, and practical exercises. Choose the best answer for each question. Good luck!

Question 1:

What is the primary difference between a Golden Ticket and a Silver Ticket?

Golden Tickets target services, Silver Tickets target users.
Golden Tickets are TGTs, Silver Tickets are service tickets.
Golden Tickets require KRBTGT hash, Silver Tickets require user password.
There is no difference between them.

Question 2:

Which hash is required to create a Golden Ticket?

Administrator account hash.
KRBTGT account hash.
Service account hash.
Domain controller hash.

Question 3:

What does PAC stand for in the context of Kerberos tickets?

Privileged Access Certificate.
Privilege Attribute Certificate.
Protected Authentication Credential.
Primary Access Control.

Question 4:

Which of the following is NOT a limitation of Silver Tickets?

Service-specific access only.
Requires service account hash.
Domain-wide access like Golden Tickets.
Less detectable than Golden Tickets.

Question 5:

What is the primary purpose of the Skeleton Key attack?

To create forged service tickets.
To install a universal password for all domain users.
To extract KRBTGT hash from domain controllers.
To bypass Kerberos authentication entirely.

Question 6:

Which Mimikatz command is used to create a Golden Ticket?

kerberos::golden
kerberos::silver
kerberos::ticket
kerberos::create

Question 7:

What happens to Golden Tickets when the KRBTGT password is rotated?

They become more powerful.
They remain valid indefinitely.
They become invalid and unusable.
They automatically update with the new password.

Question 8:

Which encryption type is considered the strongest for Kerberos tickets?

RC4-HMAC
AES128-CTS-HMAC-SHA1-96
AES256-CTS-HMAC-SHA1-96
DES-CBC-MD5

Question 9:

Explain the key components required to create a Silver Ticket and how they differ from Golden Ticket requirements.

Question 10:

Describe the detection methods that can be used to identify Skeleton Key attacks and explain why they are particularly challenging to detect.