PT0-003: CompTIA PenTest+Demo

Question

During a security assessment, a penetration tester needs to compromise user accounts without activating IDS/IPS detection rules. Which of the following is the most effective way to achieve this task?

A Crack user accounts using compromised hashes.
B Brute force accounts using a dictionary attack.
C Bypass authentication using SQL injection.
D Compromise user accounts using a XSS attack.

Explanation

Cracking compromised password hashes is generally performed offline, so it does not require repeated login attempts or exploit traffic against the target. This substantially reduces the chance of triggering network IDS/IPS detection rules.

PT0-003: CompTIA PenTest+Demo

AstroTutor

Notes

Readiness

QuestionQ297

Community Discussion