CompTIA PT0-003 Practice Test - Questions Answers, Page 23

[Attacks and Exploits]

Which of the following methods should a physical penetration tester employ to access a rarely used door that has electronic locking mechanisms?

With one day left to complete the testing phase of an engagement, a penetration tester obtains the following results from an Nmap scan:

Not shown: 1670 closed ports

PORT STATE SERVICE VERSION

80/tcp open http Apache httpd 2.2.3 (CentOS)

3306/tcp open mysql MySQL (unauthorized)

8888/tcp open http lighttpd 1.4.32

Which of the following tools should the tester use to quickly identify a potential attack path?

[Attacks and Exploits]

A penetration tester wants to send a specific network packet with custom flags and sequence numbers to a vulnerable target. Which of the following should the tester use?

[Attacks and Exploits]

Which of the following frameworks can be used to classify threats?

[Information Gathering and Vulnerability Scanning]

A penetration tester is enumerating a Linux system. The goal is to modify the following script to provide more comprehensive system information:

#!/bin/bash

ps aux >> linux_enum.txt

Which of the following lines would provide the most comprehensive enumeration of the system?

[Reporting and Communication]

Which of the following components should a penetration tester include in the final assessment report?

[Reporting and Communication]

Which of the following elements of a penetration test report can be used to most effectively prioritize the remediation efforts for all the findings?

[Tools and Code Analysis]

A penetration tester compromises a Windows OS endpoint that is joined to an Active Directory local environment. Which of the following tools should the tester use to manipulate authentication mechanisms to move laterally in the network?

[Reporting and Communication]

Which of the following components should a penetration tester include in an assessment report?