During a penetration test of a server application, a security consultant found that the application randomly crashed or remained stable after opening several simultaneous connections to the application and always submitting the same packets of data. Which of the following is the best sequence of steps the tester should use to understand and exploit the vulnerability?

Attach a remote debugger to the server application. Establish a large number of connections to the server application. Send fixed packets of data simultaneously using those connections.

Attach a remote profiler to the server application. Establish a random number of connections to the server application. Send fixed packets of data simultaneously using those connections.

Attach a remote debugger to the server application. Establish a large number of connections to the server application. Send fixed packets of data simultaneously using those connections.

Attach a local disassembler to the server application. Establish a single connection to the server application. Send fixed packets of data simultaneously using that connection.

Attach a remote disassembler to the server application. Establish a small number of connections to the server application. Send fixed packets of data simultaneously using those connections.

During a penetration testing engagement, a penetration tester discovers a buffer overflow vulnerability. Which of the following actions should the tester take to maintain professionalism and integrity?

Report the vulnerability to the client and provide recommendations for remediation.

Apply for a bug bounty reward from the manufacturer.

Inform the appropriate authorities about the vulnerability before informing the client.

Report the vulnerability to the client and provide recommendations for remediation.

Exploit the vulnerability to demonstrate its impact to the client.

Which of the following best explains why a penetration tester would use ProxyChains during an assessment?

To fingerprint the organization

A security engineer is working to identify all email servers on a network. Which of the following commands should the engineer use to identify the servers as well as the software version the servers are running?

nmap 10.0.0.1/24 -sT -sV -p 25,110,143,465,993,995

nmap 10.0.0.1/24 -sT -v -p 21,22,23,53,110,135

nmap 10.0.0.1/24 -sS -sV -p 37,110,119,161,445,3389

nmap 10.0.0.1/24 -sA -sU -p 80,110,443,209,389,464

A penetration tester wants to crack MD5 hashes more quickly. The tester knows that the first part of the password is Winter followed by four digits and a special character at the end. Which of the following commands should the tester use?

hashcat hahs.txt -m 500 -a 7 ---force -) -w 4 ---opencl-device-types 1,2

John hash.txt --format-MD5 ---wordlist-seasons.txt --fork-8 --rules-base64

hashcat hash.txt -m 0 -a seasons.txt ?d?d?d?d?s

John hash.txt ---format=Raw-MD5 ---rules=jumbo ---wordlist=seasons.txt

hashcat hahs.txt -m 500 -a 7 ---force -) -w 4 ---opencl-device-types 1,2

A client claims that a ransomware attack has crippled its corporate network following a penetration test assessment. Which of the following is the most likely root cause of this issue?

Failure to remove tester-created credentials

Client reluctance to accept findings

Incomplete data destruction process

Failure to remove tester-created credentials

During an assessment of a web application, a penetration tester would like to test the application for blind SQL injection. Which of the following techniques should the penetration tester perform next?

'; IF (1 = 1) WA1TFOR DELAY '0:0:10* ---

xyz' AND (SELECT CASE WHEN (1-1) THEN 1/0 ELSE *a* END)-'a)

A penetration tester discovers a file, key.enc. on a shared drive and then executes the following command, which yields the following output: Which of the following are the best recommendations for the penetration tester to suggest? (Select two).

Deleting unencrypted files from the share

Implementing password management

Using stronger encryption for private key files

Deleting unencrypted files from the share

CompTIA PT0-002 Practice Test 12 - Free Online Exam Prep & Questions

A penetration tester developed the following script:

bash

Copy code

for ip in $(seq 1 254);

do echo $(echo '192.168.15.$ip ') $(host 192.168.15.$ip dns.company.com | grep 'domain name pointer')

done | grep 'domain name pointer' | cut -d' ' -f1,6

Which of the following best explains the purpose of this script?

Become a Premium Member for full access

Unlock Premium Member

CompTIA PT0-002 Practice Test 12

Question

CompTIA PT0-002 Practice Tests

Practice Tests