Which practice helps defend against pass-the-hash attacks by limiting the exposure of hashes?

Using the principle of least privilege

Using a strong encryption algorithm for data at rest

Which monitoring technique can help detect credential stuffing attacks?

Monitoring for changes to system files

Monitoring for open ports on the network

Monitoring for a high volume of login attempts from a single IP address

CompTIAPenTest+

Domain 4Objective 2

Authentication Attacks PT0-003 Practice Questions (Page 5)

Part of the Attacks and exploits domain, which accounts for 35% of the PT0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~23–39 in this domain), expect 4–7 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

9concepts

35%of the exam

Questions 21–25

21foundation · easy
A penetration tester wants to brute-force a web application login form. Which tool is specifically designed for this purpose?
Select an answer first
22foundation · easy
Which practice helps defend against pass-the-hash attacks by limiting the exposure of hashes?
Select an answer first
23foundation · easy
Which monitoring technique can help detect credential stuffing attacks?
Select an answer first
24application · medium
A penetration tester is assessing a company's customer portal. The tester has obtained a list of username/password pairs from a previous data breach of a different website. The tester wants to test whether these credentials work on the customer portal. Which attack technique is the tester using?
Select an answer first
25foundation · easy
Which tool is specifically designed to facilitate pass-the-hash attacks?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PT0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “PT0-003” is a trademark of its owner, used for identification only.

Authentication Attacks PT0-003 Practice Questions (Page 5)

Questions 21–25

A penetration tester wants to brute-force a web application login form. Which tool is specifically designed for this purpose?

Which practice helps defend against pass-the-hash attacks by limiting the exposure of hashes?

Which monitoring technique can help detect credential stuffing attacks?

A penetration tester is assessing a company's customer portal. The tester has obtained a list of username/password pairs from a previous data breach of a different website. The tester wants to test whether these credentials work on the customer portal. Which attack technique is the tester using?

Which tool is specifically designed to facilitate pass-the-hash attacks?

Keep studying — Attacks and exploits