A county asks the tester to exploit Domain Admin as the first step without service enumeration. What should the tester do?
Select an answer to reveal the explanation.
Short Explanation
Charging straight at Domain Admin with no map is like kicking every door in a hallway hoping one is the vault. Enumerate, prioritize, and take the calmest path that still proves risk. Blind exploit spraying is how scopes and systems get hurt.
Full Explanation
Effective exploitation starts with understanding exposed services, versions, and trust relationships so testers can choose authorized, low-collateral techniques. Demands to obtain Domain Admin immediately without enumeration encourage noisy, unsafe module spraying and weak evidence quality. Least-impact path planning protects availability and keeps activity inside RoE while still demonstrating meaningful risk. Professional judgment privileges discovery and prioritization over prestige footholds.