CompTIA PenTest+ (PT0-003) — Question 189

A penetration tester gains initial access to a Windows workstation on a client’s network. The tester wants to determine the next target but does not want to install software on the workstation.

Which of the following is the best tool to list potential targets?

Answer options

• A. mmc.exe
• B. Netstat
• C. Mimikatz
• D. explorer.exe
• E. CME

Correct answer: A

Explanation

The correct answer is A, mmc.exe, as it allows the tester to access various administrative tools and manage system settings without requiring additional software. Other options like B (Netstat) provide network connections but not a comprehensive list of targets, C (Mimikatz) is used for credential extraction, D (explorer.exe) is a file management tool, and E (CME) requires installation.