What is the primary function of the 'sekurlsa::logonpasswords' command in Mimikatz?

To enumerate network shares on the host

To dump the SAM database to a file

To extract plaintext passwords and hashes from the LSASS process memory

To crack password hashes using a dictionary attack

Which of the following is a common technique used to escalate privileges on a Linux host by exploiting a misconfigured file permission?

Exploiting a world-writable script that is executed by root

Using the 'sudo -l' command to list allowed commands

Using a kernel exploit to gain root access

Performing a password spraying attack against the root account

A penetration tester has gained a foothold on a Linux host as a non-root user. The tester discovers that the 'sudo' version is vulnerable to CVE-2021-3156 (Baron Samedit). Which action would most likely lead to root privileges?

Run the sudo exploit to gain a root shell

Exploit a SUID binary to escalate privileges

Use 'sudo -u root' to switch to root

Modify the sudoers file to grant root privileges

CompTIAPenTest+

Domain 4Objective 3

Host-Based Attacks PT0-003 Practice Questions (Page 2)

Part of the Attacks and exploits domain, which accounts for 35% of the PT0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~23–39 in this domain), expect 4–7 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

8concepts

35%of the exam

Questions 6–10

6foundation · easy
What is the primary function of the 'sekurlsa::logonpasswords' command in Mimikatz?
Select an answer first
7application · medium
A penetration tester has compromised a Windows domain controller and wants to extract the password hashes of all domain users. Which tool would be most appropriate for this task?
Select an answer first
8foundation · easy
Which of the following is a common technique used to escalate privileges on a Linux host by exploiting a misconfigured file permission?
Select an answer first
9foundation · easy
Which Windows API function is used to allocate memory in a remote process for the purpose of process injection?
Select an answer first
10application · medium
A penetration tester has gained a foothold on a Linux host as a non-root user. The tester discovers that the 'sudo' version is vulnerable to CVE-2021-3156 (Baron Samedit). Which action would most likely lead to root privileges?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PT0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “PT0-003” is a trademark of its owner, used for identification only.

Host-Based Attacks PT0-003 Practice Questions (Page 2)

Questions 6–10

What is the primary function of the 'sekurlsa::logonpasswords' command in Mimikatz?

A penetration tester has compromised a Windows domain controller and wants to extract the password hashes of all domain users. Which tool would be most appropriate for this task?

Which of the following is a common technique used to escalate privileges on a Linux host by exploiting a misconfigured file permission?

Which Windows API function is used to allocate memory in a remote process for the purpose of process injection?

A penetration tester has gained a foothold on a Linux host as a non-root user. The tester discovers that the 'sudo' version is vulnerable to CVE-2021-3156 (Baron Samedit). Which action would most likely lead to root privileges?

Keep studying — Attacks and exploits