Which of the following best describes the goal of exploiting a vulnerability for privilege escalation?

To gain access to a system with higher privileges than the current user

To bypass network security controls

To exfiltrate data from the system

To maintain persistence on the system

A penetration tester gains initial access to a Windows host as a standard user. Which technique would allow the tester to run a process with elevated privileges by exploiting a misconfigured service that runs with SYSTEM privileges?

Using a pass-the-hash attack to authenticate as the service account

Performing a buffer overflow on the service to execute code in its context

Modifying the service binary path to point to a malicious executable

DLL injection into a user-mode process

What is the purpose of credential dumping in a penetration test?

To encrypt the host's file system

To obtain password hashes or plaintext credentials for lateral movement

To identify open ports on the host

CompTIAPenTest+

Domain 4Objective 3

Host-Based Attacks PT0-003 Practice Questions (Page 3)

Part of the Attacks and exploits domain, which accounts for 35% of the PT0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~23–39 in this domain), expect 4–7 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

8concepts

35%of the exam

Questions 11–15

11foundation · easy
Which Windows API function is commonly used to load a DLL into a remote process during DLL injection?
Select an answer first
12foundation · easy
Which of the following best describes the goal of exploiting a vulnerability for privilege escalation?
Select an answer first
13foundation · easy
A penetration tester gains initial access to a Windows host as a standard user. Which technique would allow the tester to run a process with elevated privileges by exploiting a misconfigured service that runs with SYSTEM privileges?
Select an answer first
14application · medium
A penetration tester discovers that the Windows 'Print Spooler' service is running and vulnerable to a known privilege escalation exploit. The tester wants to exploit this vulnerability to gain SYSTEM privileges. Which tool would be most appropriate to automate this?
Select an answer first
15foundation · easy
What is the purpose of credential dumping in a penetration test?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PT0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “PT0-003” is a trademark of its owner, used for identification only.

Host-Based Attacks PT0-003 Practice Questions (Page 3)

Questions 11–15

Which Windows API function is commonly used to load a DLL into a remote process during DLL injection?

Which of the following best describes the goal of exploiting a vulnerability for privilege escalation?

A penetration tester gains initial access to a Windows host as a standard user. Which technique would allow the tester to run a process with elevated privileges by exploiting a misconfigured service that runs with SYSTEM privileges?

A penetration tester discovers that the Windows 'Print Spooler' service is running and vulnerable to a known privilege escalation exploit. The tester wants to exploit this vulnerability to gain SYSTEM privileges. Which tool would be most appropriate to automate this?

What is the purpose of credential dumping in a penetration test?

Keep studying — Attacks and exploits