During a security assessment, a penetration tester wants to compromise user accounts without triggering IDS/IPS...

[Reference: CompTIA PenTest+ PT0-003 Official Study Guide - "Password Cracking Techniques and Evasion", Incorrect options:, Option B (Brute force): Generates excessive failed logins, triggering IDS/IPS alerts., Option C (SQL injection): Exploits database vulnerabilities, not direct account compromise., Option D (XSS attack): Can steal cookies but does not directly compromise accounts., , , , , ]