A penetration tester is taking screen captures of hashes obtained from a domain controller. Which of the following best explains why the penetration tester should immediately obscure portions of the images before saving?

To maintain confidentiality of data/information

To avoid disclosure of how the hashes were obtained

To make the hashes appear shorter and easier to crack

To prevent analysis based on the type of hash

Which of the following types of information would most likely be included in an application security assessment report addressed to developers? (Select two).

Use of non-optimized sort functions

Non-compliance with code style guide

A cyclomatic complexity score of 3

A penetration tester is conducting an assessment for an e-commerce company and successfully copies the user database to the local machine. After a closer review, the penetration tester identifies several high-profile celebrities who have active user accounts with the online service. Which of the following is the most appropriate next step?

Immediately contact the client.

Contact the high-profile celebrities.

Delete the high-profile accounts.

Immediately contact the client.

Record the findings in the penetration test report.

A penetration tester is reviewing the logs of a proxy server and discovers the following URLs:https://test.comptia.com/profile.php?userid=1546https://test.cpmptia.com/profile.php?userid=5482https://test.comptia.com/profile.php?userid=3618Which of the following types of vulnerabilities should be remediated?

Insecure direct object reference

A penetration tester is conducting an assessment of an organization that has both a web and mobile application. While testing the user profile page, the penetration tester notices that additional data is returned in the API response, which is not displayed in the web user interface. Which of the following is the most effective technique to extract sensitive user data?

Compare the API response fields to GUI fields looking for PH.

Compare PI I from data leaks to publicly exposed user profiles.

Target the user profile page with a denial-of-service attack.

Target the user profile page with a reflected XSS attack.

Compare the API response fields to GUI fields looking for PH.

A penetration tester is looking for a particular type of service and obtains the output below:I Target is synchronized with 127.127.38.0 (reference clock)I Alternative Target Interfaces:I 10.17.4.20I Private Servers (0)I Public Servers (0)I Private Peers (0)I Public Peers (0)I Private Clients (2)I 10.20.8.69 169.254.138.63I Public Clients (597)I 4.79.17.248 68.70.72.194 74.247.37.194 99.190.119.152I 12.10.160.20 68.80.36.133 75.1.39.42 108.7.58.118I 68.56.205.98I 2001:1400:0:0:0:0:0:1 2001:16d8:ddOO:38:0:0:0:2I 2002:db5a:bccd:l:21d:e0ff:feb7:b96f 2002:b6ef:81c4:0:0:1145:59c5:3682I Other Associations (1)|_ 127.0.0.1 seen 1949869 times, last tx was unicast v2 mode 7Which of the following commands was executed by the tester?

nmap -sU -pU:123 -Pn -n ---script=ntp-monlist <target>

nmap -sU -pU:517 -Pn -n ---script=supermicro-ipmi-config <target>

nmap -sU -pU:123 -Pn -n ---script=ntp-monlist <target>

nmap -sU -pU:161 -Pn -n ---scriptvoldemort-info <target>

nmap -sU -pU:37 -Pn -n ---script=icap-info <target>

A penetration tester is working to enumerate the PLC devices on the 10.88.88.76/24 network. Which of the following commands should the tester use to achieve the objective in a way that minimizes the risk of affecting the PLCs?

nmap ---script=s7-info -p 102 10.88.88.76/24 -T3

nmap ---script=wsdd-discover -p 3702 -sUlO.88.88.76/24

nmap --script=iax2-version -p 4569 -sU -V 10.88.88.76/24 -T2

nmap --script=xll-access -p 6000-6009 10.88.88.76/24

A penetration testing firm performs an assessment every six months for the same customer. While performing network scanning for the latest assessment, the penetration tester observes that several of the target hosts appear to be residential connections associated with a major television and ISP in the are a. Which of the following is the most likely reason for the observation?

The IP ranges changed ownership.

The penetration tester misconfigured the network scanner.

The network scanning tooling is not functioning properly.

The IP ranges changed ownership.

The network scanning activity is being blocked by a firewall.

A penetration tester is performing an assessment for an application that is used by large organizations operating in the heavily regulated financial services industry. The penetration tester observes that the default Admin User account is enabled and appears to be used several times a day by unfamiliar IP addresses. Which of the following is the most appropriate way to remediate this issue?

Restrict simultaneous user log-ins.

During a security assessment, a penetration tester decides to implement a simple TCP port scanner to check the open ports from 1000 to 2000. Which of the following Python scripts would achieve this task?

for i in range(1000, 2001): s = socket(AF_INET, SOCK_STREAM) conn = s.connect_ex((host_IP, i)) if (conn == 0): print(fPort {i} OPEN') s.close ()

for i in range(1001, 2000): s = socket(AF_INET, SOCK_STREAM) conn = s.connect---ex((host_IP, i)) if (conn == 0): print (f'Port {i} OPEN') s.close ()

for i in range(1000, 2001): s = socket(AF---INET, SOCK_DGRAM) conn = s.connect---ex((host_IP, i)) if (conn == 0): print(f'Port {i} OPEN') s.close ()

for i in range (1000, 2000): s = socket(SOCK_STREAM, AF_INET) conn = s.connect---ex((host---IP, i)) if (conn == 0): print (f'Port {i} OPEN') s.close()

A penetration tester discovers passwords in a publicly available data breach during the reconnaissance phase of the penetration test. Which of the following is the best action for the tester to take?

Contact the client and inform them of the breach.

Add the passwords to an appendix in the penetration test report.

Do nothing. Using passwords from breached data is unethical.

Contact the client and inform them of the breach.

Use the passwords in a credential stuffing attack when the external penetration test begins.

Which of the following best explains why communication is a vital phase of a penetration test?

To discuss situational awareness

To build rapport with the emergency contact

To explain the data destruction process

To ensure the likelihood of future assessments

A penetration tester captures SMB network traffic and discovers that users are mistyping the name of a fileshare server. This causes the workstations to send out requests attempting to resolve the fileshare server's name. Which of the following is the best way for a penetration tester to exploit this situation?

Respond to the requests with the tester's IP address and steal authentication credentials.

Relay the traffic to the real file server and steal documents as they pass through.

Host a malicious file to compromise the workstation.

Reply to the broadcasts with a fake IP address to deny access to the real file server.

Respond to the requests with the tester's IP address and steal authentication credentials.

A penetration tester uses Hashcat to crack hashes discovered during a penetration test and obtains the following output:ad09cd16529b5f5a40a3e15344e57649f4a43a267a97f008af01af803603c4c8 : Summer2023 !!7945bb2bb08731fc8d57680ffa4aefec91c784d231de029c610b778eda5ef48b:p@ssWord123ea88ceab69cb2fb8bdcf9ef4df884af219fffbffab473ec13f20326dc6f84d13: Love-You999Which of the following is the best way to remediate the penetration tester's discovery?

Implementing a blocklist of known bad passwords

Requiring passwords to follow complexity rules

Implementing a blocklist of known bad passwords

Setting the minimum password length to ten characters

Encrypting the passwords with a stronger algorithm

During a security assessment, a penetration tester decides to write the following Python script: import requestsx= ['OPTIONS', 'TRACE', 'TEST'lfor y in x;z - requests.request(y, 'http://server.net')print(y, z.status_code, z.reason)Which of the following is the penetration tester trying to accomplish? (Select two).

'Web application firewall detection

After obtaining a reverse shell connection, a penetration tester runs the following command: www-data@server!2:sudo -1User www-data may run the following commands on serverl2: (root) NOPASSWD: /usr/bin/viWhich of the following is the fastest way to escalate privileges on this server?

Executing the command sudo vi -c ' Jbash'

Editing the file /etc/passwd to add a new user with uid 0

Creating a Bash script, saving it on the /tmp folder, and then running it

Executing the command sudo vi -c ' Jbash'

Editing the file/etc/sudoers to allow any command

CompTIA PT0-002 Practice Test 10 - Free Online Exam Questions 361-400

A penetration tester issues the following command after obtaining a low-privilege reverse shell: wmic service get name,pathname,startmode

Which of the following is the most likely reason the penetration tester ran this command?

Become a Premium Member for full access

Unlock Premium Member

CompTIA PT0-002 Practice Test 10

Question

CompTIA PT0-002 Practice Tests

Practice Tests