CompTIA Updated PT0-003 Exam Questions and Answers by vladimir

To avoid triggering IDS/IPS alerts, the attacker should use offline cracking on compromised hashes rather than direct brute-force attempts.

Crack user accounts using compromised hashes (Option A):

Hashes can be cracked offline using tools like Hashcat or John the Ripper.

No direct login attempts, avoiding detection by security systems.

WiFi-Pumpkin is used for man-in-the-middle (MitM) attacks on Wi-Fi networks, making it ideal for intercepting and accessing data.

Option A (Metasploit) ❌: Good for exploitation, but not specialized for Wi-Fi attacks.

Option B (WiFi-Pumpkin) ✅: Correct.

Creates fake Wi-Fi access points.

Intercepts network traffic (SSL stripping, DNS spoofing).

Option C (SET - Social Engineering Toolkit) ❌: Focuses on phishing, not Wi-Fi attacks.

Option D (theHarvester) ❌: Used for OSINT, not Wi-Fi exploitation.

Option E (WiGLE.net) ❌: Maps Wi-Fi networks, but does not capture sensitive data.

???? Reference: CompTIA PenTest+ PT0-003 Official Guide – Wireless Attacks & Fake APs

This attack attempts to manipulate the API by fuzzing the authorization token (Authorization: Bearer (FUZZ)). This suggests an attempt to bypass authentication or escalate privileges by using an invalid, stolen, or guessed token—a form of API abuse.

Option A (Directory traversal) ❌:

Involves manipulating file paths (e.g., ../../../etc/passwd), but this attack targets API authentication.

Option B (API abuse) ✅:

Correct. Fuzzing the authorization token suggests an attempt to bypass authentication or test for weak API security.

Option C (Server-side request forgery - SSRF) ❌:

SSRF manipulates backend requests to make unauthorized HTTP calls, which is not evident here.

Option D (Privilege escalation) ❌:

While API abuse may lead to privilege escalation, fuzzing the token alone does not directly escalate privileges.

???? Reference: CompTIA PenTest+ PT0-003 Official Guide – API Security Testing & Authentication Bypasses

A DNS zone transfer attack occurs when a misconfigured DNS server allows attackers to retrieve the entire DNS record set.

Zone transfer (Option A):

The command host -t axfr domain.com dnsl.domain.com requests an AXFR (authoritative transfer) of the DNS records.

This provides subdomains, email servers, and internal DNS records, which attackers can use for reconnaissance.