従業員がフィッシング詐欺に引っかかり、攻撃者が会社の PC にアクセスできるようになりました。攻撃者は PC のメモリをスクレイピングして他の認証情報を探しました。攻撃者はこれらの認証情報を解読することなく、それを使用して企業ネットワークを横方向に移動しました。このタイプの攻撃を説明するのは次のうちどれですか。
正解:D
The scenario describes an attacker who obtained credentials from a compromised system's memory and used them without cracking to move laterally within the network. This technique is known as a "pass-the-hash" attack, where the attacker captures hashed credentials (e.g., NTLM hashes) and uses them to authenticate and gain access to other systems without needing to know the plaintext password. This is a common attack method in environments where weak security practices or outdated protocols are in use. Reference = CompTIA Security+ SY0-701 Course Content: The course discusses credential-based attacks like pass-the-hash, emphasizing their impact and the importance of protecting credential stores.