PT0-003: CompTIA PenTest+Demo

By CompTIA · Question Mode

QuestionQ64

Reconnaissance and Enumeration

A penetration tester wants to gather permission details for objects in the domain. The tester has a valid AD user account and access to an internal PC. Which of the following step sequences is the best way for the tester to achieve the desired result?

  • A
    1. Escalate privileges.2. Execute Rubeus.3. Run a Cypher query on Rubeus to get the results.
  • B
    1. Run SharpHound.2. Install CrackMapExec.3. Perform a CrackMapExec database query on CME to get the results.
  • C
    1. Run SharpHound2. Install BloodHound.3. Perform a Cypher query on BloodHound to get the results.
  • D
    1. Escalate privileges.2. Get Windows Registry data.3. Perform a query to get results.
Explanation

SharpHound collects Active Directory object and ACL relationship data, including abusable permissions on AD objects, and authenticated users can generally query most required AD structure data through LDAP. BloodHound analyzes the collected graph data and supports Cypher queries to retrieve permission relationships.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!