nerdexam
CompTIA

PT0-003 · Question #244

During an assessment, a penetration tester compromises some machines but finds that none of the accounts have sufficient access to the target HR database server. In order to enumerate accounts with…

The correct answer is D. BloodHound. BloodHound is a tool used to enumerate and analyze Active Directory environments, helping penetration testers identify attack paths to high-value targets (e.g., HR database servers). It maps out relationships between users, groups, and permissions to determine potential lateral…

Submitted by the_admin· Mar 6, 2026Post-exploitation and lateral movement

Question

During an assessment, a penetration tester compromises some machines but finds that none of the accounts have sufficient access to the target HR database server. In order to enumerate accounts with sufficient permissions, the tester wants to model an attack path before taking further action. Which of the following tools should the tester use to meet this objective?

Options

  • AResponder
  • BMimikatz
  • CHydra
  • DBloodHound
  • ETruffleHog

How the community answered

(32 responses)
  • B
    3% (1)
  • C
    13% (4)
  • D
    78% (25)
  • E
    6% (2)

Explanation

BloodHound is a tool used to enumerate and analyze Active Directory environments, helping penetration testers identify attack paths to high-value targets (e.g., HR database servers). It maps out relationships between users, groups, and permissions to determine potential lateral movement and privilege escalation paths.

Topics

#BloodHound#Active Directory enumeration#Attack path analysis#Privilege escalation

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PT0-003 Practice