Which of the following methods allows the penetration t…

An external penetration tester compromised one of the client organization’s authentication servers and retrieved
the password database. Which of the following methods allows the penetration tester to MOST efficiently use
any obtained administrative credentials on the client organization’s other systems, without impacting the
integrity of any of the systems?

An external penetration tester compromised one of the client organization’s authentication servers and retrieved
the password database. Which of the following methods allows the penetration tester to MOST efficiently use
any obtained administrative credentials on the client organization’s other systems, without impacting the
integrity of any of the systems?

A.
Use the pass the hash technique

B.
Use rainbow tables to crack the passwords

C.
Use the existing access to change the password

D.
Use social engineering to obtain the actual password



Leave a Reply 2

Your email address will not be published. Required fields are marked *


Queiroz

Queiroz

Cleared CAS-002 exam recently!!! Total 77 questions, started with 10 SIMs: configuring the firewall ACL, placing equipments in the network to stop attacks, and so on.

I mainly learned the CASP Cert Guide books and practised PassLeader CAS-002 dumps with 900q (new version, helped a lot for my passing).

Dumps on this site are not valid, only 2 SIMs and few MCQs are from them, other 8 SIMs and many MCQs are missing!!!

Recommend to practise PassLeader 900q CAS-002 dumps, especially the last 240 questions. Here you can get PassLeader CAS-002 dumps:

http://www.comptiadump.com/category/comptia-advanced-security-practitioner-casp-certification/cas-002-dumps

GOOD LUCK!!