Home / CompTIA / PT0-002

Question list

List of questions

Question 1

(0)

A company obtained permission for a vulnerability scan from its cloud service provider and now wants to test the security of its hosted data. Which of the following should the tester verify FIRST t

Question 2

(0)

A Chief Information Security Officer wants a penetration tester to evaluate the security awareness level of the company's employees. Which of the following tools can help the tester achieve this go

Question 3

(0)

Which of the following commands will allow a penetration tester to permit a shell script to be executed by the file owner?

Question 4

(0)

A compliance-based penetration test is primarily concerned with:

Question 5

(0)

A penetration tester is explaining the MITRE ATT&CK framework to a company's chief legal counsel. Which of the following would the tester MOST likely describe as a benefit of the framework?

Question 6

(0)

The following line-numbered Python code snippet is being used in reconnaissance: Which of the following line numbers from the script MOST likely contributed to the script triggering a "probable p

Question 7

(0)

A consulting company is completing the ROE during scoping. Which of the following should be included in the ROE?

Question 8

(0)

A new client hired a penetration-testing company for a month-long contract for various security assessments against the client's new service. The client is expecting to make the new service publicly

Question 9

(0)

A penetration tester has been hired to perform a physical penetration test to gain access to a secure room within a client's building. Exterior reconnaissance identifies two entrances, a WiFi guest

Question 10

(0)

Which of the following is the MOST common vulnerability associated with IoT devices that are directly connected to the Internet?

Question 345 - PT0-002 discussion

A company developed a new web application to allow its customers to submit loan applications. A penetration tester is reviewing the application and discovers that the application was developed in ASP and used MSSQL for its back-end database. Using the application's search form, the penetration tester inputs the following code in the search input field:

IMG SRC=vbscript:msgbox ('Vulnerable_to_Attack') ; >originalAttribute='SRC'originalPath='vbscript;msgbox ('Vulnerable_to_Attack ') ;>'

When the tester checks the submit button on the search form, the web browser returns a pop-up windows that displays 'Vulnerable_to_Attack.' Which of the following vulnerabilities did the tester discover in the web application?