A penetration tester is performing an assessment focused on attacking the authentication identity provider hosted...

Vendor: CompTIA
Product: PT0-003
Update on: Sep 5, 2025
Questions: 252

CompTIA PT0-003 Question Answer

A penetration tester is performing an assessment focused on attacking the authentication identity provider hosted within a cloud provider. During the reconnaissance phase, the tester finds that the system is using OpenID Connect with OAuth and has dynamic registration enabled. Which of the following attacks should the tester try first?

A password-spraying attack against the authentication system

A brute-force attack against the authentication system

A replay attack against the authentication flow in the system

A mask attack against the authentication system