QuestionQ143

Post-exploitation and Lateral Movement

A penetration tester is conducting an engagement whose primary objective is to gather confidential information that could be used to exfiltrate data and carry out a ransomware attack. During the engagement, the tester obtains an internal foothold on the target network. Which of the following tasks should the tester perform next to meet the objective?

  • A Initiate a social engineering campaign.
  • B Perform credential dumping.
  • C Compromise an endpoint.
  • D Share enumeration.
Explanation

Credential dumping extracts stored credentials or credential material from a compromised system. Those credentials can enable lateral movement and privileged access, supporting the collection and exfiltration of sensitive data as well as broad ransomware deployment.

Community Discussion

No comments yet. Be the first to start the discussion!