CompTIA PenTest+ (PT0-003) PT0-003 — Question 125

During a security assessment, a penetration tester wants to compromise user accounts without triggering IDS/IPS detection rules. Which of the following is the most effective way for the tester to accomplish this task?