Unique Top-selling PT0-002 Exams - New 2022 CompTIA Pratice Exam
CompTIA PenTest+ Dumps PT0-002 Exam for Full Questions - Exam Study Guide
NEW QUESTION 68
A company becomes concerned when the security alarms are triggered during a penetration test. Which of the following should the company do NEXT?
- A. Halt the penetration test.
- B. Assume the alert is from the penetration test.
- C. Conduct an incident response.
- D. Deconflict with the penetration tester.
Answer: C
NEW QUESTION 69
A penetration tester is explaining the MITRE ATT&CK framework to a company's chief legal counsel.
Which of the following would the tester MOST likely describe as a benefit of the framework?
- A. The framework is static and ensures stability of a security program overtime.
- B. Understanding the tactics of a security intrusion can help disrupt them.
- C. The methodology can be used to estimate the cost of an incident better.
- D. Scripts that are part of the framework can be imported directly into SIEM tools.
Answer: B
NEW QUESTION 70
A penetration tester recently completed a review of the security of a core network device within a corporate environment. The key findings are as follows:
* The following request was intercepted going to the network device:
GET /login HTTP/1.1
Host: 10.50.100.16
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Firefox/31.0 Accept-Language: en-US,en;q=0.5 Connection: keep-alive Authorization: Basic WU9VUilOQU1FOnNlY3JldHBhc3N3b3jk
* Network management interfaces are available on the production network.
* An Nmap scan returned the following:
Which of the following would be BEST to add to the recommendations section of the final report? (Choose two.)
- A. Enforce enhanced password complexity requirements.
- B. Implement a better method for authentication.
- C. Disable HTTP/301 redirect configuration.
- D. Disable or upgrade SSH daemon.
- E. Create an out-of-band network for management.
- F. Eliminate network management and control interfaces.
Answer: B,C
NEW QUESTION 71
A penetration tester ran an Nmap scan on an Internet-facing network device with the -F option and found a few open ports. To further enumerate, the tester ran another scan using the following command:
nmap -O -A -sS -p- 100.100.100.50
Nmap returned that all 65,535 ports were filtered. Which of the following MOST likely occurred on the second scan?
- A. A firewall or IPS blocked the scan.
- B. The scan returned ICMP echo replies.
- C. The edge network device was disconnected.
- D. The penetration tester used unsupported flags.
Answer: A
NEW QUESTION 72
A penetration tester runs the unshadow command on a machine. Which of the following tools will the tester most likely use NEXT?
- A. John the Ripper
- B. Cain and Abel
- C. Hydra
- D. Mimikatz
Answer: A
NEW QUESTION 73
When developing a shell script intended for interpretation in Bash, the interpreter /bin/bash should be explicitly specified. Which of the following character combinations should be used on the first line of the script to accomplish this goal?
- A. <$
- B. #$
- C. ##
- D. <#
- E. #!
Answer: B
NEW QUESTION 74
You are a penetration tester running port scans on a server.
INSTRUCTIONS
Part 1: Given the output, construct the command that was used to generate this output from the available options.
Part 2: Once the command is appropriately constructed, use the given output to identify the potential attack vectors that should be investigated further.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Answer:
Explanation:
See explanation below.
Explanation
Part 1 - nmap 192.168.2.2 -sV -O
Part 2 - Weak SMB file permissions
NEW QUESTION 75
A penetration tester wrote the following script to be used in one engagement:
Which of the following actions will this script perform?
- A. Look for open ports.
- B. Listen for a reverse shell.
- C. Create an encrypted tunnel.
- D. Attempt to flood open ports.
Answer: A
NEW QUESTION 76
A red team gained access to the internal network of a client during an engagement and used the Responder tool to capture important dat a. Which of the following was captured by the testing team?
- A. User hashes sent over SMB
- B. Multiple handshakes
- C. Encrypted file transfers
- D. IP addresses
Answer: A
NEW QUESTION 77
Which of the following tools provides Python classes for interacting with network protocols?
- A. Empire
- B. Responder
- C. Impacket
- D. PowerSploit
Answer: C
NEW QUESTION 78
A large client wants a penetration tester to scan for devices within its network that are Internet facing. The client is specifically looking for Cisco devices with no authentication requirements. Which of the following settings in Shodan would meet the client's requirements?
- A. "cisco-ios" "last-modified"
- B. "cisco-ios" "default-passwords"
- C. "cisco-ios" "admin+1234"
- D. "cisco-ios" "no-password"
Answer: C
NEW QUESTION 79
A penetration tester wrote the following script to be used in one engagement:
Which of the following actions will this script perform?
- A. Look for open ports.
- B. Listen for a reverse shell.
- C. Create an encrypted tunnel.
- D. Attempt to flood open ports.
Answer: A
NEW QUESTION 80
A penetration tester is preparing to perform activities for a client that requires minimal disruption to company operations. Which of the following are considered passive reconnaissance tools? (Choose two.)
- A. Retina
- B. Shodan
- C. Nikto
- D. Burp Suite
- E. Nessus
- F. Wireshark
Answer: B,F
NEW QUESTION 81
You are a penetration tester reviewing a client's website through a web browser.
INSTRUCTIONS
Review all components of the website through the browser to determine if vulnerabilities are present.
Remediate ONLY the highest vulnerability from either the certificate, source, or cookies.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Answer:
Explanation:
Explanation
Graphical user interface Description automatically generated
NEW QUESTION 82
A company is concerned that its cloud VM is vulnerable to a cyberattack and proprietary data may be stolen.
A penetration tester determines a vulnerability does exist and exploits the vulnerability by adding a fake VM instance to the IaaS component of the client's VM. Which of the following cloud attacks did the penetration tester MOST likely implement?
- A. Direct-to-origin
- B. Credential harvesting
- C. Cross-site scripting
- D. Malware injection
Answer: A
NEW QUESTION 83
The results of an Nmap scan are as follows:
Which of the following would be the BEST conclusion about this device?
- A. This device is most likely a gateway with in-band management services.
- B. This device may be vulnerable to the Heartbleed bug due to the way transactions over TCP/22 handle heartbeat extension packets, allowing attackers to obtain sensitive information from process memory.
- C. This device may be vulnerable to remote code execution because of a butter overflow vulnerability in the method used to extract DNS names from packets prior to DNSSEC validation.
- D. This device is most likely a proxy server forwarding requests over TCP/443.
Answer: B
NEW QUESTION 84
An assessment has been completed, and all reports and evidence have been turned over to the client. Which of the following should be done NEXT to ensure the confidentiality of the client's information?
- A. Encrypt and store any client information for future analysis
- B. Follow the established data retention and destruction process
- C. Report any findings to regulatory oversight groups
- D. Publish the findings after the client reviews the report
Answer: A
NEW QUESTION 85
A penetration tester is testing a web application that is hosted by a public cloud provider. The tester is able to query the provider's metadata and get the credentials used by the instance to authenticate itself. Which of the following vulnerabilities has the tester exploited?
- A. Server-side request forgery
- B. Local file inclusion
- C. Remote file inclusion
- D. Cross-site request forgery
Answer: A
NEW QUESTION 86
Which of the following provides a matrix of common tactics and techniques used by attackers along with recommended mitigations?
- A. OWASP Top 10
- B. NIST SP 800-53
- C. MITRE ATT&CK framework
- D. PTES technical guidelines
Answer: C
NEW QUESTION 87
A penetration tester is starting an assessment but only has publicly available information about the target company. The client is aware of this exercise and is preparing for the test.
Which of the following describes the scope of the assessment?
- A. Known environment testing
- B. Unknown environment testing
- C. Partially known environment testing
- D. Physical environment testing
Answer: B
NEW QUESTION 88
A penetration tester discovers that a web server within the scope of the engagement has already been compromised with a backdoor. Which of the following should the penetration tester do NEXT?
- A. Continue the engagement and include the backdoor finding in the final report
- B. Inform the customer immediately about the backdoor
- C. Forensically acquire the backdoor Trojan and perform attribution
- D. Utilize the backdoor in support of the engagement
Answer: B
NEW QUESTION 89
A penetration tester has identified several newly released CVEs on a VoIP call manager. The scanning tool the tester used determined the possible presence of the CVEs based off the version number of the service. Which of the following methods would BEST support validation of the possible findings?
- A. Utilize an nmap -sV scan against the service
- B. Test with proof-of-concept code from an exploit database
- C. Manually check the version number of the VoIP service against the CVE release
- D. Review SIP traffic from an on-path position to look for indicators of compromise
Answer: A
NEW QUESTION 90
A penetration tester has established an on-path attack position and must now specially craft a DNS query response to be sent back to a target host. Which of the following utilities would BEST support this objective?
- A. Socat
- B. tcpdump
- C. Scapy
- D. dig
Answer: A
NEW QUESTION 91
A penetration tester discovers that a web server within the scope of the engagement has already been compromised with a backdoor. Which of the following should the penetration tester do NEXT?
- A. Continue the engagement and include the backdoor finding in the final report
- B. Forensically acquire the backdoor Trojan and perform attribution
- C. Utilize the backdoor in support of the engagement
- D. Inform the customer immediately about the backdoor
Answer: A
NEW QUESTION 92
A penetration tester has been hired to configure and conduct authenticated scans of all the servers on a software company's network. Which of the following accounts should the tester use to return the MOST results?
- A. Service
- B. Root user
- C. Local administrator
- D. Network administrator
Answer: A
NEW QUESTION 93
......
Best way to practice test for CompTIA PT0-002: https://www.actualtestsit.com/CompTIA/PT0-002-exam-prep-dumps.html
PT0-002 Dump Ready - Exam Questions and Answers: https://drive.google.com/open?id=16WLe7ZUTAwfbKcAukzpWFUx4tZc16Amg