CompTIA PT0-003 Exam - Topic 1 Question 13 Discussion

Actual exam question for CompTIA's PT0-003 exam

Question #: 13
Topic #: 1

[All PT0-003 Questions]

Which of the following is the most efficient way to infiltrate a file containing data that could be sensitive?

AUse steganography and send the file over FTP

BCompress the file and send it using TFTP

CSplit the file in tiny pieces and send it over dnscat

DEncrypt and send the file over HTTPS

Show Suggested Answer

Suggested Answer: D

When considering efficiency and security for exfiltrating sensitive data, the chosen method must ensure data confidentiality and minimize the risk of detection. Here's an analysis of each option:

Use steganography and send the file over FTP (Option A):

Drawbacks: FTP is not secure as it transmits data in clear text, making it susceptible to interception. Steganography can add an extra layer of obfuscation, but the use of FTP makes this option insecure.

Compress the file and send it using TFTP (Option B):

Drawbacks: TFTP is inherently insecure because it does not support encryption, making it easy for attackers to intercept the data during transfer.

Split the file in tiny pieces and send it over dnscat (Option C):

Drawbacks: While effective at evading detection by using DNS, splitting the file and managing the reassembly adds complexity. Additionally, large data transfers over DNS can raise suspicion.

Encrypt and send the file over HTTPS (Answer: D):

Advantages: HTTPS is widely used and trusted, making it less likely to raise suspicion. Encryption ensures the data remains confidential during transit.

The use of HTTPS for secure data transfer is a standard practice in cybersecurity, providing both encryption and integrity of the data being transmitted.

Conclusion: Encrypting the file and sending it over HTTPS is the most efficient and secure method for exfiltrating sensitive data, ensuring both confidentiality and reducing the risk of detection.

by Odette at Sep 13, 2024, 02:36 PM

Limited Time Offer

25%

Off

Get Premium PT0-003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ollie

3 months ago

Wait, can you really send files over dnscat? That sounds sketchy!

upvoted 0 times

...

Chantay

3 months ago

I disagree, TFTP is not secure enough for sensitive data.

upvoted 0 times

...

Alease

3 months ago

A is a classic method, can't go wrong with steganography.

upvoted 0 times

...

Jamal

4 months ago

C sounds interesting, but is it really efficient?

upvoted 0 times

...

Rasheeda

4 months ago

Definitely D, encryption is key!

upvoted 0 times

...

Rosio

4 months ago

I practiced a similar question where FTP was mentioned, but I can't remember if it's secure enough for sensitive data.

upvoted 0 times

...

Zachary

4 months ago

I feel like encrypting the file and using HTTPS is the safest option, but it might not be the most efficient.

upvoted 0 times

...

Anna

4 months ago

I think splitting the file into tiny pieces could help avoid detection, but I can't recall if dnscat is reliable for that.

upvoted 0 times

...

Erasmo

5 months ago

I remember we discussed steganography in class, but I'm not sure if it's the most efficient method for this scenario.

upvoted 0 times

...

Mohammad

5 months ago

I'm a bit confused by the question. Can we really be discussing ways to infiltrate sensitive data? That doesn't seem right.

upvoted 0 times

...

Allene

5 months ago

Option D is the way to go. Encrypting the file and sending it over HTTPS is the most secure and efficient approach.

upvoted 0 times

...

Glenn

5 months ago

I'm not sure about this one. Sending sensitive data over the internet seems risky, no matter the method.

upvoted 0 times

...

Nohemi

5 months ago

Hmm, this is a tricky one. I'll need to think carefully about the most efficient way to approach this.

upvoted 0 times

...

Jackie

5 months ago

I've got this. Option C is the best choice - splitting the file into tiny pieces and sending it over dnscat will make it nearly impossible to detect.

upvoted 0 times

...

Jovita

5 months ago

I'm a bit confused on this one. The wording of the question is a bit vague, and I'm not sure exactly what they're looking for in terms of "additional" client representations. I'll need to review my notes to see if I can narrow it down.

upvoted 0 times

...

Reuben

1 year ago

Dnscat, huh? Sounds like something straight out of a spy movie. I don't know about you, but I prefer my data transfer methods to be a little less... theatrical.

upvoted 0 times

...

Cristy

1 year ago

Wow, these options are like a hacker's dream come true. But I think I'll pass and leave the sensitive data where it belongs - far away from prying eyes.

upvoted 0 times