Active Directory Attacks →mediumMultiple SelectObjective-mapped

CPENT Active Directory Attacks Practice Question

Which TWO commands or tools are standard for performing AS-REP Roasting against an Active Directory domain from an external or internal position?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Rubeus.exe asreproast

GetNPUsers.py from Impacket and Rubeus (using 'rubeus asreproast') are the two primary tools used to request AS-REP responses for accounts without pre-auth.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
secretsdump.py -asrep
Why it's wrong here
secretsdump.py does not feature an -asrep parameter.
✓
Rubeus.exe asreproast
Why this is correct
Rubeus includes an asreproast module designed to harvest AS-REP tickets on Windows hosts.
✗
SharpHound.exe -CollectionMethod ASREP
Why it's wrong here
SharpHound does not have an 'ASREP' collection method flag.
✓
Impacket's GetNPUsers.py script
Why this is correct
GetNPUsers.py queries Active Directory for users with DONT_REQUIRE_PREAUTH and requests their AS-REP.
✗
certipy asrep
Why it's wrong here
Certipy focuses on AD CS vulnerabilities, not AS-REP roasting.

About these practice questions

Courseiva writes every CPENT question from scratch — 274 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official EC-Council exam blueprint

Ready to practise?

Turn this into a habit — start a practice session.

Start practice session

Scored practice sessions

Short scored sets — answer, get feedback, read the explanation, move on.

CPENT Practice Questions 2 — 50 Questions→CPENT Practice Exam 3 — 20 Questions→

Practice by domain

Drill one exam section at a time instead of jumping between unrelated topics.

Active Directory Attacks Cloud And Hybrid Infrastructure Security Iot And OT Exploitation

Filter by question format

Pick a question style and work only that format until it feels routine.

Browse scenarios

Practice by topic

One concept per page — questions, worked explanations, and a short concept guide.

Active Directory Attacks practice questions Network And Perimeter Exploitation practice questions Privilege Escalation Lateral Movement And Post Exploitation practice questions CPENT scenario practice questions

Where to go next

All EC-Council practice questions Exam domains All CPENT questions

This CPENT practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CPENT exam.