Exam SY0-601 topic 1 question 711 discussion

Actual exam question from CompTIA's SY0-601

Question #: 711
Topic #: 1

An employee fell for a phishing scam, which allowed an attacker to gain access to a company PC. The attacker scraped the PC's memory to find other credentials. Without cracking these credentials, the attacker used them to move laterally through the corporate network. Which of the following describes this type of attack?

A. Privilege escalation
B. Buffer overflow
C. SQL injection
D. Pass-the-hash

Show Suggested Answer

Suggested Answer: D 🗳️

by JMB7448 at Sept. 22, 2023, 10:49 a.m.

Comments

Submit Cancel

cybershortie

Highly Voted 1 year, 9 months ago

Selected Answer: D

PASS THE HASH- lateral movement without cracking hashes

upvoted 9 times

...

LayinCable

Highly Voted 1 year, 1 month ago

Selected Answer: D

They definitely got me with this one, I was thinking A at first because of the words they chose. it is MOST DEFINITELY D. Because of the fact that they didn't go up in escalation via accounts, they just went lateral, WITHOUT BREAKING HASHES. Cmon LayinCable, pay attention man. Learn from me guys.

upvoted 6 times

...

shady23

Most Recent 1 year, 1 month ago

Selected Answer: D

D. Pass-the-hash

upvoted 1 times

...

BlackSpider

1 year, 8 months ago

Selected Answer: D

pass the hash

upvoted 1 times

...

JMB7448

1 year, 9 months ago

Selected Answer: D

D: Unlike other credential theft attacks, a pass the hash attack does not require the attacker to know or crack the password to gain access to the system. Rather, it uses a stored version of the password to initiate a new session.

upvoted 5 times

...