exam questions

Exam PT1-002 All Questions

View all questions & answers for the PT1-002 exam

Exam PT1-002 topic 1 question 76 discussion

Actual exam question from CompTIA's PT1-002
Question #: 76
Topic #: 1
[All PT1-002 Questions]

A red team gained access to the internal network of a client during an engagement and used the Responder tool to capture important data. Which of the following was captured by the testing team?

  • A. Multiple handshakes
  • B. IP addresses
  • C. Encrypted file transfers
  • D. User hashes sent over SMB
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
BinarySoldier
Highly Voted 3 years, 7 months ago
The answer is right
upvoted 5 times
...
bieecop
Most Recent 1 year, 7 months ago
Selected Answer: D
When an attacker uses Responder to capture data, one of the primary types of information they may obtain is user credentials or hashes sent over Server Message Block (SMB). SMB is a network file-sharing protocol that is commonly used in Windows networks for accessing resources like files and printers.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...