Ravi Sir's Cyber Security Cards › Interview Cards
How would you talk about Kerberoasting without teaching the attack?
How would you talk about Kerberoasting without teaching the attack? Explain the idea: weak passwords on service accounts with SPNs are easy targets. Then pivot to defence. Defence: long random service-account passwords or gMSA, and monitoring odd ticket requests. “I explain the risk and the fix, not
Read card text
What this card says
Short answer
Explain the idea: weak passwords on service accounts with SPNs are easy targets. Then pivot to defence.
Example
Defence: long random service-account passwords or gMSA, and monitoring odd ticket requests.
Say it in the interview
“I explain the risk and the fix, not a step-by-step attack.”
Why it matters
Talking defence, not attack recipes, keeps you ethical and still shows knowledge.
Learn more in the lesson: 47.5 Identity Attacks Awareness (Kerberos / PTH – defensive talking points only)