CompTIA PenTest+ (PT0-002) — Question 125

A penetration tester opened a shell on a laptop at a client's office but is unable to pivot because of restrictive ACLs on the wireless subnet. The tester is also aware that all laptop users have a hard-wired connection available at their desks. Which of the following is the BEST method available to pivot and gain additional access to the network?

Answer options

• A. Set up a captive portal with embedded malicious code.
• B. Capture handshakes from wireless clients to crack.
• C. Span deauthentication packets to the wireless clients.
• D. Set up another access point and perform an evil twin attack.

Correct answer: C

Explanation

The best method to pivot in this scenario is option C, as sending deauthentication packets will force wireless clients to disconnect and reconnect, allowing the tester to capture connection attempts. Options A and D involve more complex setups and may not guarantee immediate access. Option B, while useful, does not provide direct access compared to the immediate opportunity created by deauthentication.