Exam PT0-003 topic 1 question 115 discussion

Actual exam question from CompTIA's PT0-003

Question #: 115
Topic #: 1

A penetration tester is working on an engagement in which a main objective is to collect confidential information that could be used to exfiltrate data and perform a ransomware attack. During the engagement, the tester is able to obtain an internal foothold on the target network. Which of the following is the next task the tester should complete to accomplish the objective?

A. Initiate a social engineering campaign.
B. Perform credential dumping.
C. Compromise an endpoint.
D. Share enumeration.

Show Suggested Answer

Suggested Answer: D 🗳️

by Slomhu at May 24, 2025, 6:04 p.m.

Comments

Submit Cancel

928d342

2 days, 17 hours ago

Selected Answer: B

Credential dumping allows the tester to extract usernames, passwords, hashes, or tokens from memory (e.g., using tools like Mimikatz). • These credentials can help escalate privileges, move laterally across the network, access sensitive systems, and ultimately locate and exfiltrate confidential data. • It’s a common step attackers use after gaining an initial foothold to gain broader access and control.

upvoted 1 times

...