Home / CompTIA / PT0-002

Question list

List of questions

Question 1

(0)

A company obtained permission for a vulnerability scan from its cloud service provider and now wants to test the security of its hosted data. Which of the following should the tester verify FIRST t

Question 2

(0)

A Chief Information Security Officer wants a penetration tester to evaluate the security awareness level of the company's employees. Which of the following tools can help the tester achieve this go

Question 3

(0)

Which of the following commands will allow a penetration tester to permit a shell script to be executed by the file owner?

Question 4

(0)

A compliance-based penetration test is primarily concerned with:

Question 5

(0)

A penetration tester is explaining the MITRE ATT&CK framework to a company's chief legal counsel. Which of the following would the tester MOST likely describe as a benefit of the framework?

Question 6

(0)

The following line-numbered Python code snippet is being used in reconnaissance: Which of the following line numbers from the script MOST likely contributed to the script triggering a "probable p

Question 7

(0)

A consulting company is completing the ROE during scoping. Which of the following should be included in the ROE?

Question 8

(0)

A new client hired a penetration-testing company for a month-long contract for various security assessments against the client's new service. The client is expecting to make the new service publicly

Question 9

(0)

A penetration tester has been hired to perform a physical penetration test to gain access to a secure room within a client's building. Exterior reconnaissance identifies two entrances, a WiFi guest

Question 10

(0)

Which of the following is the MOST common vulnerability associated with IoT devices that are directly connected to the Internet?

Question 29 - PT0-002 discussion

A penetration tester is exploring a client's website. The tester performs a curl command and obtains the following:

* Connected to 10.2.11.144 (::1) port 80 (#0)

> GET /readmine.html HTTP/1.1

> Host: 10.2.11.144

> User-Agent: curl/7.67.0

> Accept: */*

Mark bundle as not supporting multiuse

< HTTP/1.1 200

< Date: Tue, 02 Feb 2021 21:46:47 GMT

< Server: Apache/2.4.41 (Debian)

< Content-Length: 317

< Content-Type: text/html; charset=iso-8859-1

!DOCTYPE html>

<head>

<title>WordPress › ReadMe</title>

</head>

Which of the following tools would be BEST for the penetration tester to use to explore this site further?

Burp Suite

DirBuster

WPScan

OWASP ZAP

Show Answer

asked 02/10/2024

Sonjoy Kanwal

42 questions

Your answer: A B C D

0 comments

Sorted by