CompTIA Updated PT0-003 Exam Questions and Answers by layla-rose

A DNS zone transfer attack occurs when a misconfigured DNS server allows attackers to retrieve the entire DNS record set.

Zone transfer (Option A):

The command host -t axfr domain.com dnsl.domain.com requests an AXFR (authoritative transfer) of the DNS records.

This provides subdomains, email servers, and internal DNS records, which attackers can use for reconnaissance.

The scenario indicates that the tester’s capture device, when in monitor mode, cannot detect the target wireless network.

The most likely cause is frequency band incompatibility — if the client’s wireless infrastructure uses Wi-Fi 6E (6GHz band), and the tester’s adapter only supports 2.4GHz/5GHz, then the tester won’t see any packets or SSIDs from that band.

Why not the others:

B. Misconfiguration: While possible, the question specifies the network cannot be seen at all, pointing to hardware capability rather than misconfiguration.

C. Wrong SSID: Even with a wrong SSID, the tester would still see the beacon frames if on the same frequency band.

D. Not using Aircrack-ng: The tool used doesn’t affect whether the capture device can see the network — the adapter’s frequency support does.

CompTIA PT0-003 Mapping:

Domain 3.0: Attacks and Exploits

Wireless network attacks and troubleshooting (frequency bands, hardware compatibility, Wi-Fi 6E considerations).

Capturing plaintext credentials in network traffic is done using packet sniffing. Wireshark is the best tool for this task.

Option A (Burp Suite) ❌: Used for web application testing and intercepting HTTPS traffic, but not general network sniffing.

Option B (Wireshark) ✅: Correct.

Wireshark is a packet analysis tool that captures unencrypted network traffic, including plaintext credentials.

Option C (ZAP - Zed Attack Proxy) ❌: Similar to Burp Suite, but focused on web application security, not network packet capture.

Option D (Metasploit) ❌: Metasploit is used for exploitation rather than capturing traffic.

???? Reference: CompTIA PenTest+ PT0-003 Official Guide – Packet Sniffing & Network Traffic Analysis

To detect all open ports and enumerate services, the tester needs to:

Use -sV (Service Version Detection)

Use -Pn (Disables ICMP ping to bypass firewalls)

Use -p- (Scans all 65,535 TCP ports)

nmap -sV -Pn -p- 10.10.10.10 (Option D):

This command performs full-port scanning, including high-numbered ports like 50123/tcp (ms-rpc).

Without -p-, high ports would be missed.