Free CompTIA PenTest+ PT0-002 Practice Question

The correct answer is 'Pass the hash', as this technique allows an attacker to authenticate to a remote server or service using the underlying NTLM or LAN Manager hash of a user's password, bypassing the need for the plain text password. This method is less noisy than brute force attacks, reducing the risk of detection, and is effective in networks where password hashes are reusable. 'Brute force' would be noisy and likely to trigger account lockouts or alerts. While 'Trojan' could help maintain access or exfiltrate data, it does not inherently facilitate lateral movement. 'Dictionary attacks' are similar to brute force in their likelihood of detection and do not specifically apply to the context of leveraging existing credentials for moving laterally.