Exam PT1-002 topic 1 question 75 discussion

Actual exam question from CompTIA's PT1-002

Question #: 75
Topic #: 1

In the process of active service enumeration, a penetration tester identifies an SMTP daemon running on one of the target company's servers. Which of the following actions would BEST enable the tester to perform phishing in a later stage of the assessment?

A. Test for RFC-defined protocol conformance.
B. Attempt to brute force authentication to the service.
C. Perform a reverse DNS query and match to the service banner.
D. Check for an open relay configuration.

Show Suggested Answer

Suggested Answer: D 🗳️

by BinarySoldier at Nov. 25, 2021, 5:42 p.m.

Comments

Submit Cancel

BinarySoldier

Highly Voted 3 years, 6 months ago

I think D should be the answer. SMTP is a protocol associated with mail servers. Therefore, for a penetration tester, an open relay configuration can be exploited to launch phishing attacks.

upvoted 8 times

...

RVP20

Highly Voted 3 years, 3 months ago

Selected Answer: D

I think D is the correct answer.

upvoted 5 times

...

some_specialist

Most Recent 3 years, 2 months ago

Selected Answer: D

If the SMTP server has an open relay, that means anyone could for example, use Send-MailMessage using their server as the SMTP address to send to, while also including a From: address of one in their domain to make it appear more legitimate.

upvoted 3 times

...