nerdexam
CompTIA

PT0-002 · Question #263

In an unprotected network file repository, a penetration tester discovers a text file containing usernames and passwords in cleartext and a spreadsheet containing data for 50 employees, including…

The correct answer is D. Create a TPM-backed sealed storage location within which the unprotected file repository can be. After discovering highly sensitive cleartext credentials and PII, the penetration tester's immediate ethical responsibility is to secure the discovered information to prevent its further compromise.

Post-exploitation and lateral movement

Question

In an unprotected network file repository, a penetration tester discovers a text file containing usernames and passwords in cleartext and a spreadsheet containing data for 50 employees, including full names, roles, and serial numbers. The tester realizes some of the passwords in the text file follow the format: <name-serial_number>. Which of the following would be the best action for the tester to take NEXT with this information?

Options

  • ACreate a custom password dictionary as preparation for password spray testing.
  • BRecommend using a password manager/vault instead of text files to store passwords securely.
  • CRecommend configuring password complexity rules in all the systems and applications.
  • DCreate a TPM-backed sealed storage location within which the unprotected file repository can be

How the community answered

(70 responses)
  • A
    1% (1)
  • B
    11% (8)
  • C
    6% (4)
  • D
    81% (57)

Why each option

After discovering highly sensitive cleartext credentials and PII, the penetration tester's immediate ethical responsibility is to secure the discovered information to prevent its further compromise.

ACreate a custom password dictionary as preparation for password spray testing.

While creating a custom password dictionary for password spray testing is a common exploitation technique, the immediate 'best action' after discovering highly sensitive data is its secure containment by the tester, rather than immediate further exploitation which could increase data exposure.

BRecommend using a password manager/vault instead of text files to store passwords securely.

Recommending a password manager/vault is a client recommendation for remediation, not an action the tester takes with the discovered information during the active assessment.

CRecommend configuring password complexity rules in all the systems and applications.

Recommending password complexity rules is a client recommendation for remediation, not an action the tester takes with the discovered information during the active assessment.

DCreate a TPM-backed sealed storage location within which the unprotected file repository can beCorrect

Creating a TPM-backed sealed storage location is a highly secure method for the penetration tester to temporarily store the sensitive cleartext credentials and PII they discovered, fulfilling their ethical obligation to protect client data during the assessment. This ensures the confidential information is not exposed while it is in the tester's possession.

Concept tested: Ethical handling of sensitive data during pen testing

Topics

#Penetration Testing Methodology#Sensitive Data Handling#Data Containment#Post-Exploitation Actions

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PT0-002 Practice