Which defense is most effective at preventing credential stuffing attacks?

Requiring multi-factor authentication

Blocking all traffic from foreign IP addresses

Encrypting all network traffic with TLS

Which technique is commonly used to detect brute-force attacks in real time?

Checking for open ports on the server

Reviewing password hash files for weak hashes

Monitoring for multiple failed login attempts from the same source

Verifying SSL certificate validity

A penetration tester is performing a brute-force attack against a login form. Which action best describes the core methodology of a brute-force attack?

Using a list of known passwords and common variations to guess the password

Intercepting and replaying a valid authentication request

Trying every possible combination of characters until the correct password is found

Exploiting a vulnerability in the authentication logic to bypass password verification

What is the primary technique used in a pass-the-hash attack?

Guessing the password by trying common passwords

Intercepting a password as it is transmitted over the network

Reusing a captured password hash to authenticate without knowing the plaintext password

Decrypting the password hash to recover the plaintext password

Which type of tool is commonly used to automate credential stuffing attacks?

A network scanner that identifies open ports

A password cracker that works offline on hash files

A tool that can send many login requests with different username/password pairs

A packet analyzer that captures network traffic

CompTIAPenTest+

Domain 4Objective 2

Authentication Attacks PT0-003 Practice Questions (Page 4)

Part of the Attacks and exploits domain, which accounts for 35% of the PT0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~23–39 in this domain), expect 4–7 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

9concepts

35%of the exam

Questions 16–20

16foundation · easy
Which defense is most effective at preventing credential stuffing attacks?
Select an answer first
17foundation · easy
Which technique is commonly used to detect brute-force attacks in real time?
Select an answer first
18foundation · easy
A penetration tester is performing a brute-force attack against a login form. Which action best describes the core methodology of a brute-force attack?
Select an answer first
19foundation · easy
What is the primary technique used in a pass-the-hash attack?
Select an answer first
20foundation · easy
Which type of tool is commonly used to automate credential stuffing attacks?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PT0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “PT0-003” is a trademark of its owner, used for identification only.