Active Directory Attacks →mediumMultiple ChoiceObjective-mapped

CPENT Active Directory Attacks Practice Question

When executing BloodHound to map Active Directory attack paths, which collector option should be specified via SharpHound to gather computer local admin rights without requiring Domain Admin privileges?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

SharpHound.exe -CollectionMethod LocalAdmin

SharpHound uses the Session and LocalAdmin collection methods by default or explicitly specified via the -CollectionMethod flag to enumerate local administrators via API calls.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
SharpHound.exe -CollectionMethod LocalAdmin
Why this is correct
The LocalAdmin collection method queries SAM/RPC/WMI on domain computers to find local group memberships.
✗
SharpHound.exe -CollectionMethod GPOChanges
Why it's wrong here
GPOChanges collects Group Policy modifications, not local administrative rights.
✗
SharpHound.exe -CollectionMethod TrustList
Why it's wrong here
TrustList targets domain trust relationships rather than local admin groups.
✗
SharpHound.exe -CollectionMethod DCOptions
Why it's wrong here
DCOptions is not a valid collection method for SharpHound.

About these practice questions

Courseiva writes every CPENT question from scratch — 274 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official EC-Council exam blueprint

Ready to practise?

Start a scored session and see where you stand.

Start practice session

Practice tests

Quick scored rounds with instant marking and a written explanation per question.

CPENT Practice Test 1 — 25 Questions→CPENT Practice Test 4 — 25 Questions→

Practice by domain

Each domain maps to a weighted exam section. Focus on the domain where you are weakest.

Active Directory Attacks Iot And OT Exploitation Cloud And Hybrid Infrastructure Security

Practice by question type

Practise one question format at a time: exhibits, multi-select, drag-and-drop, troubleshooting.

Browse scenarios

Topic-level practice

Each topic page collects the questions that test one concept, plus the theory behind it.

Active Directory Attacks practice questions Privilege Escalation Lateral Movement And Post Exploitation practice questions Network And Perimeter Exploitation practice questions CPENT scenario practice questions

Keep going

Exam domains CPENT practice test Study guide

This CPENT practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CPENT exam.