CompTIA PT0-003 Practice Test - Questions Answers, Page 13

A penetration tester is ready to add shellcode for a specific remote executable exploit. The tester is trying to prevent the payload from being blocked by antimalware that is running on the target. Which of the following commands should the tester use to obtain shell access?

A penetration tester performs a service enumeration process and receives the following result after scanning a server using the Nmap tool:

bash

PORT STATE SERVICE

22/tcp open ssh

25/tcp filtered smtp

111/tcp open rpcbind

2049/tcp open nfs

Based on the output, which of the following services provides the best target for launching an attack?

A penetration tester writes a Bash script to automate the execution of a ping command on a Class C network:

bash

for var in ---MISSING TEXT---

do

ping -c 1 192.168.10.$var

done

Which of the following pieces of code should the penetration tester use in place of the ---MISSING TEXT--- placeholder?

A penetration tester is attempting to exfiltrate sensitive data from a client environment without alerting the client's blue team. Which of the following exfiltration methods most likely remain undetected?

During a pre-engagement activity with a new customer, a penetration tester looks for assets to test. Which of the following is an example of a target that can be used for testing?

A consultant starts a network penetration test. The consultant uses a laptop that is hardwired to the network to try to assess the network with the appropriate tools. Which of the following should the consultant engage first?

Which of the following protocols would a penetration tester most likely utilize to exfiltrate data covertly and evade detection?

Which of the following is most important when communicating the need for vulnerability remediation to a client at the conclusion of a penetration test?

A penetration tester needs to scan a remote infrastructure with Nmap. The tester issues the following command: nmap 10.10.1.0/24

Which of the following is the number of TCP ports that will be scanned?