Which of the following techniques is MOST likely being attempted?

A penetration tester runs a script that queries the domain controller for user service principal names .

Which of the following techniques is MOST likely being attempted?
A . LSASS credential extraction
B . Cpassword
C . Cleartext credentials in LDAP
D . Kerberoasting

Answer: D

Explanation:

Reference: https://attack.stealthbits.com/cracking-kerberos-tgs-tickets-using-kerberoasting