CompTIA PenTest+ (PT1-002) — Question 38

A red team gained access to the internal network of a client during an engagement and used the Responder tool to capture important data. Which of the following was captured by the testing team?

Answer options

• A. Multiple handshakes
• B. IP addresses
• C. Encrypted file transfers
• D. User hashes sent over SMB

Correct answer: D

Explanation

The correct answer is D because Responder is specifically designed to capture user credentials and hashes transmitted over SMB. Options A and C are not relevant to what Responder captures, while B only refers to IP addresses, which are not the main focus of the tool's capabilities.