GPEN › Azure AD Integration
This domain covers attacking and defending hybrid identity in Microsoft Entra ID (Azure AD), including Azure AD Connect synchronization, Pass-Through Authentication, AD FS federation, and token/session abuse. Questions test whether you can trace an on-premises compromise to cloud privilege escalation, choose valid mitigations, and maintain persistence using real Entra ID and Windows identity features.
GPEN Azure AD Integration — All 32 Questions
Every question in this domain with answers and detailed explanations.
Attacking Password Hashes
Password Attacks and Formats
Scanning and Host Discovery
Metasploit
Vulnerability Scanning
Kerberos Attacks
Reconnaissance
Command and Control
Exploitation Fundamentals
Domain Escalation and Persistence
Azure Apps and Attacks
Escalation and Exploitation
Advanced Password Attacks
Pen Test Planning