ISC2 CISSP Practice Question

Pass the hash is a technique where an attacker extracts hashed user credentials (typically NTLM hashes) from one system and uses them to authenticate to other systems without needing to know or crack the actual password. This attack works because Windows authentication protocols like NTLM allow authentication using just the hash value rather than requiring the plaintext password. In the scenario described, the attacker is authenticating between systems without knowing passwords, which is the hallmark of a pass the hash attack.

Kerberos Golden Ticket attacks involve creating a forged Ticket Granting Ticket after compromising the Key Distribution Center, but this typically grants domain-wide access rather than just moving between workstations. Birthday attacks are cryptographic attacks against hash functions trying to find collisions, not an authentication bypass technique. Lateral phishing would involve sending phishing emails from a compromised account to obtain credentials, not reusing existing credential hashes for authentication.