A tester compromises a target host and then wants to maintain persistent access. Which of the following is the best way for the attacker to accomplish the objective?

Configure and register a service.

Install and run remote desktop software.

Set up a script to be run when users log in.

Perform a kerberoasting attack on the host.

Which of the following is within the scope of proper handling and most crucial when working on a penetration testing report?

Making the report clear for all objectives with a precise executive summary

Keeping both video and audio of everything that is done

Keeping the report to a maximum of 5 to 10 pages in length

Basing the recommendation on the risk score in the report

Making the report clear for all objectives with a precise executive summary

During an assessment, a penetration tester gains access to one of the internal hosts. Given the following command:schtasks /create /sc onlogon /tn 'Windows Update' /tr 'cmd.exe /c reverse_shell.exe'Which of the following is the penetration tester trying to do with this code?

Deactivate the Windows Update functionality

Create a binary application for Windows System Updates

During an internal penetration test, a tester compromises a Windows OS-based endpoint and bypasses the defensive mechanisms. The tester also discovers that the endpoint is part of an Active Directory (AD) local domain.The tester's main goal is to leverage credentials to authenticate into other systems within the Active Directory environment.Which of the following steps should the tester take to complete the goal?

Use Mimikatz to collect information about the accounts and try to authenticate in other systems

Use Hashcat to crack a password for the local user on the compromised endpoint

Use Evil-WinRM to access other systems in the network within the endpoint credentials

Use Metasploit to create and execute a payload and try to upload the payload into other systems

During a routine penetration test, the client's security team observes logging alerts that indicate several ID badges were reprinted after working hours without authorization. Which of the following is the penetration tester most likely trying to do?

Obtain long-term, valid access to the facility

Disrupt the availability of facility access systems

Change access to the facility for valid users

Revoke access to the facility for valid users

Which of the following explains the reason a tester would opt to use DREAD over PTES during the planning phase of a penetration test?

The tester is creating a threat model.

The tester is conducting a web application test.

The tester is assessing a mobile application.

The tester is evaluating a thick client application.

The tester is creating a threat model.

While performing a penetration test, a tester executes the following command:PS c:\tools> c:\hacks\PsExec.exe \\server01.cor.ptia.org -accepteula cmd.exeWhich of the following best explains what the tester is trying to do?

Perform a lateral movement attack using PsExec

Test connectivity using PsExec on the server01 using cmd.exe

Perform a lateral movement attack using PsExec

Send the PsExec binary file to the server01 using cmd.exe

Enable cmd.exe on the server01 through PsExec

During a penetration test, a tester compromises a Windows computer. The tester executes the following command and receives the following output:mimikatz # privilege::debugmimikatz # lsadump::cache---Output---lapsUser27dh9128361tsg2459210138754ij---OutputEnd---Which of the following best describes what the tester plans to do by executing the command?

The tester plans to use the hash collected to perform lateral movement to other computers using a local administrator hash.

The tester plans to perform the first step to execute a Golden Ticket attack to compromise the Active Directory domain.

The tester plans to collect application passwords or hashes to compromise confidential information within the local computer.

The tester plans to use the hash collected to perform lateral movement to other computers using a local administrator hash.

The tester plans to collect the ticket information from the user to perform a Kerberoasting attack on the domain controller.

A tester is finishing an engagement and needs to ensure that artifacts resulting from the test are safely handled. Which of the following is the best procedure for maintaining client data privacy?

Securely destroy or remove all engagement-related data from testing systems.

Remove configuration changes and any tools deployed to compromised systems.

Securely destroy or remove all engagement-related data from testing systems.

Search through configuration files changed for sensitive credentials and remove them.

Shut down C2 and attacker infrastructure on premises and in the cloud.

During a security assessment, a penetration tester wants to compromise user accounts without triggering IDS/IPS detection rules. Which of the following is the most effective way for the tester to accomplish this task?

Crack user accounts using compromised hashes.

Brute force accounts using a dictionary attack.

Bypass authentication using SQL injection.

Compromise user accounts using an XSS attack.

An external legal firm is conducting a penetration test of a large corporation. Which of the following would be most appropriate for the legal firm to use in the subject line of a weekly email update?

Privileged & Confidential Status Update

During a testing engagement, a penetration tester compromises a host and locates data for exfiltration. Which of the following are the best options to move the data without triggering a data loss prevention tool? (Select two).

Move the data using a USB flash drive.

Rename the file name extensions.

Send the data to a commonly trusted service.

A penetration tester obtains the following output during an Nmap scan:PORT STATE SERVICE135/tcp open msrpc445/tcp open microsoft-ds1801/tcp open msmq2103/tcp open msrpc3389/tcp open ms-wbt-serverWhich of the following should be the next step for the tester?

Enumerate shares and search for vulnerabilities on the SMB service.

Search for vulnerabilities on msrpc.

Enumerate shares and search for vulnerabilities on the SMB service.

Execute a brute-force attack against the Remote Desktop Services.

Execute a new Nmap command to search for another port.

A tester wants to pivot from a compromised host to another network with encryption and the least amount of interaction with the compromised host. Which of the following is the best way to accomplish this objective?

Create an SSH tunnel using sshuttle to forward all the traffic to the compromised computer.

Configure a VNC server on the target network and access the VNC server from the compromised computer.

Set up a Metasploit listener on the compromised computer and create a reverse shell on the target network.

Create a Netcat connection to the compromised computer and forward all the traffic to the target network.

Which of the following activities should be performed to prevent uploaded web shells from being exploited by others?

Remove the persistence mechanisms.

Perform secure data destruction.

A penetration tester finds it is possible to downgrade a web application's HTTPS connections to HTTP while performing on-path attacks on the local network. The tester reviews the output of the server response to:<a target='_blank' href='https://internalapp/'>curl -s -i https://internalapp/</a>HTTP/2 302date: Thu, 11 Jan 2024 15:56:24 GMTcontent-type: text/html; charset=iso-8659-1location: /loginx-content-type-options: nosniffserver: ProdWhich of the following recommendations should the penetration tester include in the report?

Add the HSTS header to the server.

Attach the httponly flag to cookies.

Front the web application with a firewall rule to block access to port 80.

Remove the x-content-type-options header.

Which of the following are valid reasons for including base, temporal, and environmental CVSS metrics in the findings section of a penetration testing report? (Select two).

Helping to prioritize remediation based on threat context

Providing information on attack complexity and vector

Providing details on how to remediate vulnerabilities

Helping to prioritize remediation based on threat context

Including links to the proof-of-concept exploit itself

Providing information on attack complexity and vector

Prioritizing compliance information needed for an audit

Adding risk levels to each asset

CompTIA PT0-003 Practice Test 5 - Free Online Exam Questions 161-200

A penetration tester finished a security scan and uncovered numerous vulnerabilities on several hosts. Based on the targets' EPSS and CVSS scores, which of the following targets is the most likely to get attacked?

Become a Premium Member for full access

Unlock Premium Member

CompTIA PT0-003 Practice Test 5

Question

CompTIA PT0-003 Practice Tests

Practice Tests