CompTIA PT0-001 Test Engine Practice Test Questions, Exam Dumps
100% Free PT0-001 Daily Practice Exam With 250 Questions
NEW QUESTION 78
Which of the following reasons does penetration tester needs to have a customer's point-of -contact information available at all time? (Select THREE).
- A. To report findings that cannot be exploited
- B. To report indicators of compromise
- C. To report the latest published exploits
- D. To report critical findings
- E. To report a server that becomes unresponsive
- F. To update the statement o( work
- G. To report a cracked password
- H. To update payment information
Answer: B,D,E
NEW QUESTION 79
A penetration tester wants to script out a way to discover all the RPTR records for a range of IP addresses. Which of the following is the MOST efficient to utilize?
- A. nmap -p 53 -oG dnslist.txt | cut -d ":" -f 4
- B. for x in (1...254); do dig -x 192.168. $x. $x; done
- C. dig -r > echo "8.8.8.8" >> /etc/resolv/conf
- D. nslookup -ns 8.8.8.8 << dnslist.txt
Answer: B
NEW QUESTION 80
A penetration tester wants to launch a graphic console window from a remotely compromised host with IP 10.0.0.20 and display the terminal on the local computer with IP
192.168.1.10. Which of the following would accomplish this task?
- A. From the local computer, run the following command
ssh -L4444 : 127.0.01:6000 -% [email protected] xterm - B. From the local computer, run the following command
Nc -1 -p 6000
Then, from the remote computer, run the following command
Xterm | nc 192.168.1.10 6000 - C. From the remote computer, run the following commands:
Export IHOST 192.168.1.10:0.0
xhost+
Terminal - D. From the local computer, run the following command
ssh -r6000 : 127.0.01:4444 -p 6000 [email protected] "xhost+; xterm"
Answer: C
NEW QUESTION 81
Which of the following wordlists is BEST for cracking MD5 password hashes of an application's users from a compromised database?
- A. ./dirb/wordlists/big.txt
- B. ./wordlists/raeta3ploit/roet_uaerpass.txt
- C. ./wfuzz/wordlist''vulns/sq1_inj -txt
- D. . /wordlists/rockyou.txt
Answer: D
NEW QUESTION 82
Which of the following CPU registers does the penetration tester need to overwrite in order to exploit a simple buffer overflow?
- A. Destination index register
- B. Index pointer register
- C. Stack base pointer
- D. Stack pointer register
Answer: D
Explanation:
Reference:
http://www.informit.com/articles/article.aspx?p=704311&seqNum=3
NEW QUESTION 83
A penetration tester is connected to a client's local network and wants to passively identify cleartext protocols and potentially sensitive data being communicated across the network. Which of the following is the BEST approach to take?
- A. Run a network vulnerability scan.
- B. Run an MITM attack.
- C. Run a port scan.
- D. Run a stress test.
Answer: B
Explanation:
Explanation/Reference: https://www.sciencedirect.com/topics/computer-science/encrypted-protocol
NEW QUESTION 84
A company requested a penetration tester review the security of an in-house developed Android application. The penetration tester received an APK file to support the assessment. The penetration tester wants to run SAST on the APK file. Which of the following preparatory steps must the penetration tester do FIRST? (Select TWO).
- A. Attach to ADB.
- B. Cross-compile the application.
- C. Convert to JAR.
- D. Convert JAR files to DEX.
- E. Re-sign the APK.
- F. Decompile.
Answer: C,F
NEW QUESTION 85
Joe, a penetration tester, has received basic account credentials and logged into a Windows system. To escalate his privilege, from which of the following places is he using Mimikatz to pull credentials?
- A. Registry
- B. LSASS
- C. SAM database
- D. Active Directory
Answer: D
Explanation:
Explanation
NEW QUESTION 86
A penetration tester observes that the content security policy header is missing during a web application penetration test.
Which of the following techniques would the penetration tester MOST likely perform?
- A. Directory traversal attack
- B. Remote file inclusion attack
- C. Command injection attack
- D. Clickjacking attack
Answer: A
Explanation:
References: https://geekflare.com/http-header-implementation/
NEW QUESTION 87
A penetration tester is preparing to conduct API testing Which of the following would be MOST helpful in preparing for this engagement?
- A. WAR
- B. Swagger
- C. W3AF
- D. NiktO
Answer: D
NEW QUESTION 88
Click the exhibit button.
A penetration tester is performing an assessment when the network administrator shows the tester a packet sample that is causing trouble on the network. Which of the following types of attacks should the tester stop?
- A. SMTP relay
- B. SNMP brute forcing
- C. ARP spoofing
- D. DNS cache poisoning
Answer: B
NEW QUESTION 89
A financial institution is asking a penetration tester to determine if collusion capabilities to produce wire fraud are present. Which of the following threat actors should the penetration tester portray during the assessment?
- A. Nation state
- B. Insider threat
- C. Script kiddie
- D. Cybercrime organization.
Answer: B
NEW QUESTION 90
Which of the following situations would cause a penetration tester to communicate with a system owner/client during the course of a test? (Select TWO)
- A. The tester discovers personally identifiable data on the system
- B. The tester discovers a finding on an out-of-scope system
- C. The system shows a lack of hardening throughout
- D. The system shows evidence of prior unauthorized compromise
- E. The system becomes unavailable following an attempted exploit
Answer: B,D
NEW QUESTION 91
A penetration tester reviews the scan results of a web application. Which of the following vulnerabilities is MOST critical and should be prioritized for exploitation?
- A. Clickjacking
- B. Expired certificate
- C. Fill path disclosure
- D. Stored XSS
Answer: D
Explanation:
Explanation/Reference:
References https://www.owasp.org/index.php/Top_10_2010-A2-Cross-Site_Scripting_(XSS)
NEW QUESTION 92
A client asks a penetration tester to add more addresses to a test currently in progress.
Which of the following would defined the target list?
- A. End-user license agreement
- B. Rules of engagement
- C. Master services agreement
- D. Statement of work
Answer: A
NEW QUESTION 93
Performance based
You are a penetration Inter reviewing a client's website through a web browser.
Instructions:
Review all components of the website through the browser to determine if vulnerabilities are present.
Remediate ONLY the highest vulnerability from either the certificate source or cookies.
Answer:
Explanation:
Explanation
Step 1
Generate a Certificate Signing Request
Step 2
Submit CSR to the CA
Step 3
Installed re-issued certificate on the server
Step 4
Remove Certificate from Server
NEW QUESTION 94
Joe, a penetration tester, has received basic account credentials and logged into a Windows system. To escalate his privilege, from which of the following places is he using Mimikatz to pull credentials?
- A. Registry
- B. LSASS
- C. SAM database
- D. Active Directory
Answer: D
NEW QUESTION 95
A vulnerability scan is run against a domain hosing a banking application that accepts connections over MTTPS and HTTP protocols Given the following results:
* SSU3 supported
* HSTS not enforced
* Application uses weak ciphers
* Vulnerable to clickjacking
Which of the following should be ranked with the HIGHEST risk?
- A. SSLv3 supported
- B. HSTS not enforced
- C. Vulnerable to clickjacking
- D. Application uses week ophers
Answer: B
NEW QUESTION 96
Which of the following types of intrusion techniques is the use of an "under-the-door tool" during a physical security assessment an example of?
- A. Lock bumping
- B. Egress sensor triggering
- C. Lockpicking
- D. Lock bypass
Answer: D
NEW QUESTION 97
A penetration tester is able to move laterally throughout a domain with minimal roadblocks after compromising a single workstation. Which of the following mitigation strategies would be BEST to recommend in the report? (Select THREE).
- A. Apply additional network access control.
- B. Increase minimum password complexity requirements.
- C. Randomize local administrator credentials for each machine.
- D. Enable full-disk encryption on every workstation.
- E. Require multifactor authentication for all logins.
- F. Disable remote logons for local administrators.
- G. Segment each host into its own VLAN.
Answer: B,E
NEW QUESTION 98
A penetration tester has been asked to conduct OS fingering with Nmap using a company-provided text file that contains a list of IP addresses. Which of the following are needed to conduct this scan? (Choose two.).
- A. oN
- B. -sS
- C. -O
- D. -oX
- E. -iL
- F. -V
Answer: A,E
Explanation:
Explanation
Explanation/Reference:
Reference https://securitytrails.com/blog/top-15-nmap-commands-to-scan-remote-hosts#six-scan-hosts-and- ip-addresses-reading-from-a-text-file
NEW QUESTION 99
......
Use Valid New PT0-001 Test Notes & PT0-001 Valid Exam Guide: https://www.updatedumps.com/CompTIA/PT0-001-updated-exam-dumps.html
PT0-001 exam torrent CompTIA study guide: https://drive.google.com/open?id=1sNhfi5lEuiGNVgzyb5yKllqq94KzRUYC