CompTIA PenTest+ (PT0-002) — Question 325

A penetration tester has compromised a customer’s internal network, gaining access to a file server that hosts email server backups. Which of the following is the best tool to assist with data exfiltration?

Answer options

• A. SFTP
• B. Nmap
• C. Netcat
• D. SCP

Correct answer: A

Explanation

SFTP (Secure File Transfer Protocol) is designed for secure data transfer over the network, making it the best choice for data exfiltration. Nmap is primarily used for network scanning and does not facilitate data transfer. Netcat is a versatile tool, but it lacks the security features of SFTP. SCP (Secure Copy Protocol) is also a valid option, but SFTP provides more flexibility and security for ongoing data transfer needs.