PEN-200 › Active Directory Attacks

Active Directory Attacks Practice Questions

This domain covers post-compromise Active Directory tradecraft on Windows estates: enumerating ACLs and delegation with BloodHound and PowerView, abusing Kerberos (Kerberoasting, AS-REP roasting, delegation, DCSync), and pivoting from a standard user to Domain Admin. Questions test tool selection, attack mechanics, and required privileges rather than raw exploitation steps.

Questions

Set types

Numbered sets

Practice by question count

questions

questions — timed

Numbered sets — 15 questions each

Set 1 Set 2

Complete question bank

PEN-200 Active Directory Attacks — All 39 Questions

Every question in this domain with answers and detailed explanations.

→

Other PEN-200 domains

Client-Side Attacks

Enumeration and Reconnaissance

Public Exploits

Web Application Attacks

Linux Privilege Escalation

Buffer Overflow Fundamentals

Port Redirection and Tunneling

Antivirus Evasion

Password Attacks

Windows Privilege Escalation

← PEN-200 Practice Test Hub