CPENT Active Directory Attacks Practice Question
Which TWO of the following Active Directory enumeration methods or tools can be used by an unprivileged domain user to identify accounts configured with 'Do not require Kerberos preauthentication' (AS-REP roasting candidates)? (Choose TWO)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Rubeus (rubeus.exe asreproast)
AS-REP Roasting targets accounts where Kerberos pre-authentication is disabled. Unprivileged users can query LDAP directly or use automated tools like Rubeus or PowerView to find these accounts.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Windows Disk Cleanup utility (cleanmgr.exe)
Why it's wrong here
Disk Cleanup is a local maintenance tool with no relation to Active Directory enumeration.
- ✗
Mimikatz (lsadump::dcsync)
Why it's wrong here
DCSync requires administrator privileges and is not an unprivileged enumeration method.
- ✓
Rubeus (rubeus.exe asreproast)
Why this is correct
Rubeus has a built-in AS-REP roasting module that queries the domain and requests tickets for vulnerable accounts.
- ✗
Local Security Policy snap-in (secpol.msc)
Why it's wrong here
secpol.msc manages local machine policies and cannot be used to query domain-wide user properties.
- ✓
PowerView (Get-DomainUser -PreauthNotRequired)
Why this is correct
PowerView includes dedicated filters to identify users with the DONT_REQ_PREAUTH property set.
About these practice questions
Courseiva writes every CPENT question from scratch — 274 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official EC-Council exam blueprint
This CPENT practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CPENT exam.