nerdexam
GIAC

GPEN · Question #105

Which of the following statements are true about NTLMv1? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is A. It uses the LANMAN hash of the user's password. B. It is mostly used when no Active Directory domain exists. C. It is a challenge-response authentication protocol.. NTLMv1 is a challenge-response authentication protocol that relies on LAN Manager hashes and is primarily used in environments without Active Directory.

Exploitation & Post-Exploitation Techniques

Question

Which of the following statements are true about NTLMv1? Each correct answer represents a complete solution. Choose all that apply.

Options

  • AIt uses the LANMAN hash of the user's password.
  • BIt is mostly used when no Active Directory domain exists.
  • CIt is a challenge-response authentication protocol.
  • DIt uses the MD5 hash of the user's password.

How the community answered

(35 responses)
  • A
    74% (26)
  • D
    26% (9)

Why each option

NTLMv1 is a challenge-response authentication protocol that relies on LAN Manager hashes and is primarily used in environments without Active Directory.

AIt uses the LANMAN hash of the user's password.Correct

NTLMv1 authenticates using the LANMAN (LM) hash derived from the user's password, which is split into two 7-character chunks and hashed with DES, making it cryptographically weak.

BIt is mostly used when no Active Directory domain exists.Correct

NTLM (including v1) is the default fallback authentication method in workgroup environments or peer-to-peer Windows networks where no Active Directory domain controller is present.

CIt is a challenge-response authentication protocol.Correct

NTLMv1 operates as a three-way challenge-response protocol where the server sends a random challenge, and the client responds with a value derived from hashing that challenge with the user's password hash.

DIt uses the MD5 hash of the user's password.

NTLMv1 does not use MD5; the NT hash component uses MD4, and the LM hash uses DES-based encryption - MD5 is not part of the NTLM v1 cryptographic chain.

Concept tested: NTLMv1 authentication mechanism and cryptographic components

Source: https://learn.microsoft.com/en-us/windows-server/security/kerberos/ntlm-overview

Topics

#NTLMv1#challenge-response authentication#LANMAN hash#Windows authentication

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full GPEN Practice