A company recently moved its software development architecture from VMs to containers. The company has asked a penetration tester to determine if the new containers are configured correctly against a DDoS attack. Which of the following should a tester perform first?

.Scan the containers for open ports.

Test the strength of the encryption settings.

Determine if security tokens are easily available.

Perform a vulnerability check against the hypervisor.

.Scan the containers for open ports.

A penetration tester is conducting an unknown environment test and gathering additional information that can be used for later stages of an assessment. Which of the following would most likely produce useful information for additional testing?

Searching for code repositories target company's organization

Searching for code repositories associated with a developer who previously worked for the target company code repositories associated with the

Searching for code repositories target company's organization

Searching for code repositories associated with the target company's organization

Searching for code repositories associated with a developer who previously worked for the target company

A penetration tester discovered a code repository and noticed passwords were hashed before they were stored in the database with the following code? salt = '123' hash = hashlib.pbkdf2_hmac('sha256', plaintext, salt, 10000) The tester recommended the code be updated to the following salt = os.urandom(32) hash = hashlib.pbkdf2_hmac('sha256', plaintext, salt, 10000) Which of the following steps should the penetration tester recommend?

Changing passwords that were created before this code update

Keeping hashes created by both methods for compatibility

Rehashing all old passwords with the new code

Replacing the SHA-256 algorithm to something more secure

During a penetration tester found a web component with no authentication requirements. The web component also allows file uploads and is hosted on one of the target public web the following actions should the penetration tester perform next?

Notify the primary contact immediately.

Continue the assessment and mark the finding as critical.

Attempting to remediate the issue temporally.

Notify the primary contact immediately.

Shutting down the web server until the assessment is finished

A penetration tester gains access to a web server and notices a large number of devices in the system ARP table. Upon scanning the web server, the tester determines that many of the devices are user ...ch of the following should be included in the recommendations for remediation?

Implement endpoint protection on the workstations

training program on proper access to the web server

patch-management program for the web server.

the web server in a screened subnet

Implement endpoint protection on the workstations

A penetration tester runs the following command:l.comptia.local axfr comptia.localwhich of the following types of information would be provided?

The hostnames and IP addresses of internal systems

The DHCP scopes and ranges used on the network

The hostnames and IP addresses of internal systems

The OS and version of the DNS server

During the assessment of a client's cloud and on-premises environments, a penetration tester was able to gain ownership of a storage object within the cloud environment using the..... premises credentials. Which of the following best describes why the tester was able to gain access?

Federation misconfiguration of the container

Key mismanagement between the environments

Container listed in the public domain

A penetration tester is conducting an Nmap scan and wants to scan for ports without establishing a connection. The tester also wants to find version data information for services running on Projects.Which of the following Nmap commands should the tester use?

..nmap -sS -sV -F target.company.com

..nmap -sU -sV -T4 -F target.company.com

..nmap -sS -sV -F target.company.com

..nmap -sT -v -T5 target.company.com

..nmap -sX -sC target.company.com

During an assessment, a penetration tester inspected a log and found a series of thousands of requests coming from a single IP address to the same URL. A few of the requests are listed below. Which of the following vulnerabilities was the attacker trying to exploit?

..Insecure direct object reference

ion tester is attempting to get more people from a target company to download and run an executable. Which of the following would be the.. :tive way for the tester to achieve this objective?

Sending a pretext email from the IT department before sending the download instructions later

Dropping USB flash drives around the company campus with the file on it

Attaching the file in a phishing SMS that warns users to execute the file or they will be locked out of their accounts

Sending a pretext email from the IT department before sending the download instructions later

Saving the file in a common folder with a name that encourages people to click it

Penetration tester who was exclusively authorized to conduct a physical assessment noticed there were no cameras pointed at the dumpster for company. The penetration tester returned at night and collected garbage that contained receipts for recently purchased networking :. The models of equipment purchased are vulnerable to attack. Which of the following is the most likely next step for the penetration?

Scan the equipment and verify the findings.

Alert the target company of the discovered information.

Verify the discovered information is correct with the manufacturer.

Scan the equipment and verify the findings.

Return to the dumpster for more information.

Penetration on an assessment for a client organization, a penetration tester notices numerous outdated software package versions were installed ...s-critical servers. Which of the following would best mitigate this issue?

Implementation of patching and change control programs

Revision of client scripts used to perform system updates

Remedial training for the client's systems administrators

Refrainment from patching systems until quality assurance approves

A security analyst is conducting an unknown environment test from 192.168 3.3. The analyst wants to limit observation of the penetration tester's activities and lower the probability of detection by intrusion protection and detection systems. Which of the following Nmap commands should the analyst use to achieve This objective?

Map --scanflags SYNFIN 192.168.5.5

A penetration tester executes the following Nmap command and obtains the following output: Which of the following commands would best help the penetration tester discover an exploitable service?

nmap -v -- script=mysql-info.nse remotehost

nmap -v -p 25 -- soript smtp-enum-users remotehost

nmap -v -- script=mysql-info.nse remotehost

nmap --ocript=omb-brute.noe remotehoat

nmap -p 3306 -- script 'http*vuln*' remotehost

Which of the following is most important to include in the final report of a static application-security test that was written with a team of application developers as the intended audience?

Code context for instances of unsafe typecasting operations

Executive summary of the penetration-testing methods used

Bill of materials including supplies, subcontracts, and costs incurred during assessment

Quantitative impact assessments given a successful software compromise

Code context for instances of unsafe typecasting operations

A penetration tester developed the following script to be used during an engagement:#!/usr/bin/pythonimport socket, sysports = [21, 22, 23, 25, 80, 139, 443, 445, 3306, 3389]if len(sys.argv) > 1:target = socket.gethostbyname (sys. argv [0])else:print ('Few arguments.')print ('Syntax: python {} <target ip>'. format (sys. argv [0]))sys.exit ()try:for port in ports:s = socket. socket (socket. AF_INET, socket. SOCK_STREAM)s.settimeout (2)result = s.connect_ex ((target, port) )if result == 0:print ('Port {} is opened'. format (port) )except KeyboardInterrupt:print ('\nExiting ... ')sys.exit ()However, when the penetration tester ran the script, the tester received the following message:socket.gaierror: [Errno -2] Name or service not knownWhich of the following changes should the penetration tester implement to fix the script?

From: target = socket.gethostbyname (sys. argv [0]) To: target = socket.gethostbyname (sys.argv[1])

From: s = socket. socket (socket. AF_INET, socket. SOCK_STREAM) To: s = socket.socket (socket.AF_INET, socket. SOCK_DGRAM)

From: import socket, sys To: import socket import sys

From: result = s.connect_ex ((target, port) ) To: result = s.connect ( (target, port) )

CompTIA PT0-002 Practice Test 8 - Free Online Exam Questions 281-320

A penetration tester wrote the following comment in the final report: "Eighty-five percent of the systems tested were found to be prone to unauthorized access from the internet." Which of the following audiences was this message intended?

Become a Premium Member for full access

Unlock Premium Member

CompTIA PT0-002 Practice Test 8

Question

CompTIA PT0-002 Practice Tests

Practice Tests