CompTIA PT0-002 Practice Test - Questions Answers, Page 36

A penetration tester is enumerating shares and receives the following output:

Which of the following should the penetration tester enumerate next?

In Java and C/C++, variable initialization is critical because:

A penetration tester fuzzes an internal server looking for hidden services and applications and obtains the following output:

Which of the following is the most likely explanation for the output?

A penetration tester wants to find the password for any account in the domain without locking any of the accounts. Which of the following commands should the tester use?

Which of the following tools would be the best to use to intercept an HTTP response of an API, change its content, and forward it back to the origin mobile device?

During a client engagement, a penetration tester runs the following Nmap command and obtains the following output:

nmap -sV -- script ssl-enum-ciphers -p 443 remotehost

| TLS_ECDHE_ECDSA_WITH_RC4_128_SHA

| TLS_ECDHE_RSA_WITH_RC4_128_SHA

| TLS_RSA_WITH_RC4_128_SHA (rsa 2048)

TLS_RSA_WITH_RC4_128_MD5 (rsa 2048)

Which of the following should the penetration tester include in the report?

A penetration tester is preparing a credential stuffing attack against a company's website. Which of the following can be used to passively get the most relevant information?

During an engagement, a penetration tester was able to upload to a server a PHP file with the following content:

<? php system ($_POST['cmd']) ?>

Which of the following commands should the penetration tester run to successfully achieve RCE?

Which of the following is the most common vulnerability associated with loT devices that are directly connected to the internet?