CAS-004 Security Operations Practice Question
During a penetration test, the tester successfully gains initial access to a web server and wants to move laterally to a database server. The web server uses a service account that has local admin rights on the database server. What is the most effective technique for lateral movement in this scenario?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Pass-the-Hash
Pass-the-Hash uses NTLM hashes to authenticate without the plaintext password, effective when the same account hash is reused across systems.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Exploit a SQL injection vulnerability in the database server
Why it's wrong here
Assumes a vulnerability; lateral movement via credentials is more direct.
- ✗
Brute-force the database server administrator password
Why it's wrong here
Inefficient and noisy; the hash is already available.
- ✗
Use a keylogger to capture credentials on the web server
Why it's wrong here
Unnecessary if the hash is already obtainable.
- ✓
Pass-the-Hash
Why this is correct
The service account's hash can be used to authenticate to the database server.
Go deeper
Related to this question
About these practice questions
One of 968 original CAS-005 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CAS-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CAS-005 exam.