CPENT Active Directory Attacks Practice Question
During a Red Team assessment against an enterprise network, an operator wants to execute a Silver Ticket attack against a specific service (e.g., CIFS) on a target server. What is a key operational advantage of a Silver Ticket compared to a Golden Ticket?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It does not require interaction with the Domain Controller to generate and does not alert the KDC for a TGT request
A Silver Ticket is forged for a specific service using the NTLM hash of that specific service account (or computer account), meaning it does not require interaction with the Domain Controller's KDC for creation, and it does not generate a TGT request that might alert domain-level monitoring.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
It can only be detected by physically inspecting the NTDS.dit file on the Domain Controller
Why it's wrong here
Silver tickets can be detected via event logs (such as Event ID 4624/4769 anomalies) and do not require NTDS.dit inspection for detection.
- ✓
It does not require interaction with the Domain Controller to generate and does not alert the KDC for a TGT request
Why this is correct
Silver tickets forge a Service Ticket (TGS) directly using the target service account's NTLM hash, bypassing the KDC TGT issuance phase.
- ✗
It grants full Domain Administrator privileges across all domain controllers
Why it's wrong here
Silver tickets are restricted to the specific service and host for which they are forged, unlike Golden tickets which grant domain-wide access.
- ✗
It automatically updates the KRBTGT password to maintain persistence
Why it's wrong here
Silver tickets do not interact with or modify the KRBTGT account.
About these practice questions
One of 274 original CPENT practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official EC-Council exam blueprint
This CPENT practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CPENT exam.