Network And Perimeter Exploitation →mediumMultiple ChoiceObjective-mapped

CPENT Network And Perimeter Exploitation Practice Question

A penetration tester has compromised an internal Windows workstation and wants to extract saved credentials from the Local Security Authority Subsystem Service (LSASS) memory. Which utility from the Sysinternals suite, frequently abused by red teams, can be used to safely dump the lsass.exe process memory?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

ProcDump

Procdump, a Sysinternals utility, can be used to generate a memory dump of lsass.exe, which can then be transferred offline to extract NTLM hashes or cleartext passwords using Mimikatz.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
ProcDump
Why this is correct
ProcDump is a Sysinternals command-line utility used to monitor CPU spikes and generate crash dumps, often used to dump LSASS.
✗
Process Explorer
Why it's wrong here
Process Explorer is a process monitoring tool, not a memory dumping utility.
✗
TCPView
Why it's wrong here
TCPView is a network connection monitoring tool.
✗
Autoruns
Why it's wrong here
Autoruns displays what programs are configured to startup during boot or login.

About these practice questions

This CPENT question is part of Courseiva's 274-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official EC-Council exam blueprint

Ready to practise?

Turn this into a habit — start a practice session.

Start practice session

Timed practice sets

Quick scored rounds with instant marking and a written explanation per question.

Free CPENT Practice Test 3 — 30 Questions→CPENT Practice Test 1 — 25 Questions→

Practice by domain

Each domain maps to a weighted exam section. Focus on the domain where you are weakest.

Network And Perimeter Exploitation Iot And OT Exploitation Privilege Escalation Lateral Movement And Post Exploitation

Practice by question type

Pick a question style and work only that format until it feels routine.

Browse scenarios

Topic-level practice

Each topic page collects the questions that test one concept, plus the theory behind it.

Network And Perimeter Exploitation practice questions Iot And OT Exploitation practice questions Privilege Escalation Lateral Movement And Post Exploitation practice questions CPENT fundamentals practice questions

Continue studying

CPENT practice test Study guide Exam domains

This CPENT practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CPENT exam.