exam questions

Exam PT0-001 All Questions

View all questions & answers for the PT0-001 exam

Exam PT0-001 topic 1 question 12 discussion

Actual exam question from CompTIA's PT0-001
Question #: 12
Topic #: 1
[All PT0-001 Questions]

A penetration tester wants to target NETBIOS name service. Which of the following is the MOST likely command to exploit the NETBIOS name service?

  • A. arpspoof
  • B. nmap
  • C. responder
  • D. burpsuite
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
mr_robot
Highly Voted 5 years, 1 month ago
PenTest+ Practice Tests Book C. Responder is a toolkit that is used to answer NetBIOS queries from Windows systems on a network. Responder is a powerful tool when exploiting NetBIOS responses. It can target individual systems or entire local networks, allowing you to analyze or respond to NetBIOS name services pretending to be the system that the query is intended for.
upvoted 26 times
...
Droid2000
Highly Voted 5 years, 7 months ago
Responder is a powerful tool when exploiting NetBIOS and LLMNR responses
upvoted 7 times
...
ronniehaang
Most Recent 2 years, 4 months ago
Selected Answer: C
Responder is a toolkit used to answer NetBIOS queries from Windows systems on a network.
upvoted 1 times
...
miabe
2 years, 10 months ago
Selected Answer: C
looks good to me
upvoted 1 times
...
Abhiram1234
3 years, 3 months ago
Selected Answer: C
Responder is a toolkit that is used to answer NetBIOS queries from Windows systems on a network. Responder is a powerful tool when exploiting NetBIOS responses. It can target individual systems or entire local networks, allowing you to analyze or respond to NetBIOS name services pretending to be the system that the query is intended for.
upvoted 1 times
...
americaman80
4 years ago
Answer is C
upvoted 2 times
...
rc7
4 years ago
C is a better answer
upvoted 2 times
...
nakres64
4 years ago
It is a tricky one but correct answer is C. to exploit NetBIOS Name Service Responder, for enumeration nmap is useful.
upvoted 1 times
...
bigwilly69
4 years, 5 months ago
it would be c, i created this tool and I know it would be most useful here.
upvoted 4 times
sh3rl0ck
4 years, 5 months ago
Did you really create it ? Then y r u here ?
upvoted 2 times
xMilkyMan123
4 years, 3 months ago
to practice for pentest+ just like the rest of us
upvoted 4 times
...
...
...
someguy1393
4 years, 5 months ago
Responder - C
upvoted 2 times
...
GreyHunter
4 years, 7 months ago
responder is the correct answer. C.
upvoted 2 times
...
jon34thna
5 years, 2 months ago
C - Responder (I agree).
upvoted 3 times
...
D1960
5 years, 2 months ago
Seems to me that either B or C is correct. What is C a better answer? nmap will work if you use nbstat script. # nmap -sU -p137 --script nbstat <target>
upvoted 2 times
mr_robot
4 years, 10 months ago
I believe the command the questions is looking for to exploit the NETBIOS name service is "responder" as it can poison the NETBIOS service and steal authentication credentials and "nmap" will only enumerate NETBIOS in order to look for open ports. https://tools.kali.org/sniffingspoofing/responder https://www.4armed.com/blog/llmnr-nbtns-poisoning-using-responder/ https://www.hackingarticles.in/netbios-and-smb-penetration-testing-on-windows/ https://null-byte.wonderhowto.com/how-to/enumerate-netbios-shares-with-nbtscan-nmap-scripting-engine-0193957/
upvoted 2 times
...
...
amankry
5 years, 4 months ago
C is correct answer
upvoted 5 times
...
zgwy
5 years, 8 months ago
wrong...C page 172 of CompTIA Pentest+ Practice Test book from SYBEX
upvoted 5 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago