Home / CompTIA / PT0-002

Question list

List of questions

Question 1

(0)

A company obtained permission for a vulnerability scan from its cloud service provider and now wants to test the security of its hosted data. Which of the following should the tester verify FIRST t

Question 2

(0)

A Chief Information Security Officer wants a penetration tester to evaluate the security awareness level of the company's employees. Which of the following tools can help the tester achieve this go

Question 3

(0)

Which of the following commands will allow a penetration tester to permit a shell script to be executed by the file owner?

Question 4

(0)

A compliance-based penetration test is primarily concerned with:

Question 5

(0)

A penetration tester is explaining the MITRE ATT&CK framework to a company's chief legal counsel. Which of the following would the tester MOST likely describe as a benefit of the framework?

Question 6

(0)

The following line-numbered Python code snippet is being used in reconnaissance: Which of the following line numbers from the script MOST likely contributed to the script triggering a "probable p

Question 7

(0)

A consulting company is completing the ROE during scoping. Which of the following should be included in the ROE?

Question 8

(0)

A new client hired a penetration-testing company for a month-long contract for various security assessments against the client's new service. The client is expecting to make the new service publicly

Question 9

(0)

A penetration tester has been hired to perform a physical penetration test to gain access to a secure room within a client's building. Exterior reconnaissance identifies two entrances, a WiFi guest

Question 10

(0)

Which of the following is the MOST common vulnerability associated with IoT devices that are directly connected to the Internet?

Question 294 - PT0-002 discussion

While performing the scanning phase of a penetration test, the penetration tester runs the following command:

........v -sV -p- 10.10.10.23-28

....ip scan is finished, the penetration tester notices all hosts seem to be down. Which of the following options should the penetration tester try next?

-su

-pn

-sn

-ss

Suggested answer: B

Explanation:

The command nmap -v -sV -p- 10.10.10.23-28 is a command that performs a port scan using nmap, which is a tool that can perform network scanning and enumeration by sending packets to hosts and analyzing their responses1. The command has the following options:

-v enables verbose mode, which increases the amount of information displayed by nmap

-sV enables version detection, which attempts to determine the version and service of the open ports

-p- specifies that all ports from 1 to 65535 should be scanned 10.10.10.23-28 specifies the range of IP addresses to be scanned The command does not have any option for host discovery, which is a process that determines which hosts are alive or reachable on a network by sending probes such as ICMP echo requests, TCP SYN packets, or ACK packets. Host discovery can help speed up the scan by avoiding scanning hosts that are down or do not respond.

However, some hosts may be configured to block or ignore host discovery probes, which can cause nmap to report them as down even if they are up. To avoid this problem, the penetration tester should use the -Pn option, which skips host discovery and assumes that all hosts are up. This option can force nmap to scan all hosts regardless of their response to host discovery probes, and may reveal some hosts that were previously missed. The other options are not valid options that the penetration tester should try next. The -su option does not exist in nmap, and would cause an error.

The -sn option performs a ping scan and lists hosts that respond, but it does not scan any ports or services, which is not useful for the penetration test. The -ss option does not exist in nmap, and would cause an error.

Show Answer

asked 02/10/2024

olanrewaju malomo

31 questions

Your answer: A B C D

0 comments

Sorted by