PT0-002 Dumps 2021 - New CompTIA PT0-002 Exam Questions
Free PT0-002 Braindumps Download Updated on Oct 21, 2021 with 112 Questions
NEW QUESTION 51
The results of an Nmap scan are as follows:
Starting Nmap 7.80 ( https://nmap.org ) at 2021-01-24 01:10 EST
Nmap scan report for ( 10.2.1.22 )
Host is up (0.0102s latency).
Not shown: 998 filtered ports
Port State Service
80/tcp open http
|_http-title: 80F 22% RH 1009.1MB (text/html)
|_http-slowloris-check:
| VULNERABLE:
| Slowloris DoS Attack
| <..>
Device type: bridge|general purpose
Running (JUST GUESSING) : QEMU (95%)
OS CPE: cpe:/a:qemu:qemu
No exact OS matches found for host (test conditions non-ideal).
OS detection performed. Please report any incorrect results at https://nmap.org/submit/.
Nmap done: 1 IP address (1 host up) scanned in 107.45 seconds
Which of the following device types will MOST likely have a similar response? (Choose two.)
- A. Print queue
- B. Active Directory domain controller
- C. Exposed RDP
- D. IoT/embedded device
- E. Public-facing web server
- F. Network device
Answer: E,F
NEW QUESTION 52
An Nmap network scan has found five open ports with identified services. Which of the following tools should a penetration tester use NEXT to determine if any vulnerabilities with associated exploits exist on the open ports?
- A. Drozer
- B. OWASP ZAP
- C. Burp Suite
- D. OpenVAS
Answer: D
NEW QUESTION 53
A penetration tester ran an Nmap scan on an Internet-facing network device with the -F option and found a few open ports. To further enumerate, the tester ran another scan using the following command:
nmap -O -A -sS -p- 100.100.100.50
Nmap returned that all 65,535 ports were filtered. Which of the following MOST likely occurred on the second scan?
- A. A firewall or IPS blocked the scan.
- B. The edge network device was disconnected.
- C. The scan returned ICMP echo replies.
- D. The penetration tester used unsupported flags.
Answer: A
NEW QUESTION 54
A new security firm is onboarding its first client. The client only allowed testing over the weekend and needed the results Monday morning. However, the assessment team was not able to access the environment as expected until Monday. Which of the following should the security company have acquired BEFORE the start of the assessment?
- A. A signed statement of work
- B. The proper emergency contacts for the client
- C. The correct user accounts and associated passwords
- D. The expected time frame of the assessment
Answer: D
NEW QUESTION 55
Appending string values onto another string is called:
- A. concatenation
- B. compilation
- C. connection
- D. conjunction
Answer: A
NEW QUESTION 56
The results of an Nmap scan are as follows:
Which of the following would be the BEST conclusion about this device?
- A. This device may be vulnerable to remote code execution because of a butter overflow vulnerability in the method used to extract DNS names from packets prior to DNSSEC validation.
- B. This device is most likely a gateway with in-band management services.
- C. This device may be vulnerable to the Heartbleed bug due to the way transactions over TCP/22 handle heartbeat extension packets, allowing attackers to obtain sensitive information from process memory.
- D. This device is most likely a proxy server forwarding requests over TCP/443.
Answer: C
NEW QUESTION 57
A company hired a penetration-testing team to review the cyber-physical systems in a manufacturing plant. The team immediately discovered the supervisory systems and PLCs are both connected to the company intranet. Which of the following assumptions, if made by the penetration-testing team, is MOST likely to be valid?
- A. Supervisors and controllers are on a separate virtual network by default.
- B. PLCs will not act upon commands injected over the network.
- C. Supervisory systems will detect a malicious injection of code/commands.
- D. Controllers will not validate the origin of commands.
Answer: D
NEW QUESTION 58
Which of the following is the MOST effective person to validate results from a penetration test?
- A. Team leader
- B. Third party
- C. Client
- D. Chief Information Officer
Answer: A
NEW QUESTION 59
In the process of active service enumeration, a penetration tester identifies an SMTP daemon running on one of the target company's servers. Which of the following actions would BEST enable the tester to perform phishing in a later stage of the assessment?
- A. Check for an open relay configuration.
- B. Test for RFC-defined protocol conformance.
- C. Attempt to brute force authentication to the service.
- D. Perform a reverse DNS query and match to the service banner.
Answer: D
NEW QUESTION 60
When preparing for an engagement with an enterprise organization, which of the following is one of the MOST important items to develop fully prior to beginning the penetration testing activities?
- A. Clarify the statement of work.
- B. Identify all third parties involved.
- C. Interview all stakeholders.
- D. Obtain an asset inventory from the client.
Answer: A
NEW QUESTION 61
When developing a shell script intended for interpretation in Bash, the interpreter /bin/bash should be explicitly specified. Which of the following character combinations should be used on the first line of the script to accomplish this goal?
- A. #$
- B. #!
- C. ##
- D. <$
- E. <#
Answer: A
NEW QUESTION 62
A client has requested that the penetration test scan include the following UDP services: SNMP, NetBIOS, and DNS. Which of the following Nmap commands will perform the scan?
- A. nmap -vv sUV -p 53,137-139,161-162 10.10.1.20/24 -oA udpscan
- B. nmap -vv sUV -p 53,123,161-162 10.10.1.20/24 -oA udpscan
- C. nmap -vv sUV -p 53, 122-123, 160-161 10.10.1.20/24 -oA udpscan
- D. nmap -vv sUV -p 53, 123-159 10.10.1.20/24 -oA udpscan
Answer: B
NEW QUESTION 63
You are a penetration tester reviewing a client's website through a web browser.
INSTRUCTIONS
Review all components of the website through the browser to determine if vulnerabilities are present.
Remediate ONLY the highest vulnerability from either the certificate, source, or cookies.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Answer:
Explanation:
NEW QUESTION 64
A penetration tester has identified several newly released CVEs on a VoIP call manager. The scanning tool the tester used determined the possible presence of the CVEs based off the version number of the service. Which of the following methods would BEST support validation of the possible findings?
- A. Test with proof-of-concept code from an exploit database
- B. Manually check the version number of the VoIP service against the CVE release
- C. Utilize an nmap -sV scan against the service
- D. Review SIP traffic from an on-path position to look for indicators of compromise
Answer: C
NEW QUESTION 65
A company is concerned that its cloud service provider is not adequately protecting the VMs housing its software development. The VMs are housed in a datacenter with other companies sharing physical resources. Which of the following attack types is MOST concerning to the company?
- A. Data flooding
- B. Session riding
- C. Side channel
- D. Cybersquatting
Answer: B
NEW QUESTION 66
A penetration tester is looking for a vulnerability that enables attackers to open doors via a specialized TCP service that is used for a physical access control system. The service exists on more than 100 different hosts, so the tester would like to automate the assessment. Identification requires the penetration tester to:
Have a full TCP connection
Send a "hello" payload
Walt for a response
Send a string of characters longer than 16 bytes
Which of the following approaches would BEST support the objective?
- A. Perform a credentialed scan with Nessus.
- B. Run nmap -Pn -sV -script vuln <IP address>.
- C. Employ an OpenVAS simple scan against the TCP port of the host.
- D. Create a script in the Lua language and use it with NSE.
Answer: A
NEW QUESTION 67
A penetration tester would like to obtain FTP credentials by deploying a workstation as an on-path attack between the target and the server that has the FTP protocol. Which of the following methods would be the BEST to accomplish this objective?
- A. Wait for the next login and perform a downgrade attack on the server.
- B. Use an FTP exploit against the server.
- C. Capture traffic using Wireshark.
- D. Perform a brute-force attack over the server.
Answer: C
NEW QUESTION 68
Which of the following BEST describe the OWASP Top 10? (Choose two.)
- A. A checklist of Apache vulnerabilities
- B. The risks defined in order of importance
- C. A risk-governance and compliance framework
- D. A list of all the risks of web applications
- E. The most critical risks of web applications
- F. A web-application security standard
Answer: B,E
NEW QUESTION 69
Which of the following protocols or technologies would provide in-transit confidentiality protection for emailing the final security assessment report?
- A. S/MIME
- B. FTPS
- C. DNSSEC
- D. AS2
Answer: A
NEW QUESTION 70
A consultant is reviewing the following output after reports of intermittent connectivity issues:
? (192.168.1.1) at 0a:d1:fa:b1:01:67 on en0 ifscope [ethernet]
? (192.168.1.12) at 34:a4:be:09:44:f4 on en0 ifscope [ethernet]
? (192.168.1.17) at 92:60:29:12:ac:d2 on en0 ifscope [ethernet]
? (192.168.1.34) at 88:de:a9:12:ce:fb on en0 ifscope [ethernet]
? (192.168.1.136) at 0a:d1:fa:b1:01:67 on en0 ifscope [ethernet]
? (192.168.1.255) at ff:ff:ff:ff:ff:ff on en0 ifscope [ethernet]
? (224.0.0.251) at 01:02:5e:7f:ff:fa on en0 ifscope permanent [ethernet]
? (239.255.255.250) at ff:ff:ff:ff:ff:ff on en0 ifscope permanent [ethernet] Which of the following is MOST likely to be reported by the consultant?
- A. An ARP flooding attack is using the broadcast address to perform DDoS.
- B. A multicast session was initiated using the wrong multicast group.
- C. A device on the network has an IP address in the wrong subnet.
- D. A device on the network has poisoned the ARP cache.
Answer: B
NEW QUESTION 71
Which of the following should a penetration tester consider FIRST when engaging in a penetration test in a cloud environment?
- A. Whether the country where the cloud service is based has any impeding laws
- B. Whether the specific cloud services are being used by the application
- C. The geographical location where the cloud services are running
- D. Whether the cloud service provider allows the penetration tester to test the environment
Answer: C
Explanation:
Section: (none)
Explanation
NEW QUESTION 72
Which of the following documents describes specific activities, deliverables, and schedules for a penetration tester?
- A. SOW
- B. NDA
- C. MOU
- D. MSA
Answer: A
NEW QUESTION 73
Which of the following types of information should be included when writing the remediation section of a penetration test report to be viewed by the systems administrator and technical staff?
- A. Information regarding the business impact if compromised
- B. The rules of engagement from the assessment
- C. A quick description of the vulnerability and a high-level control to fix it
- D. The executive summary and information regarding the testing company
Answer: A
NEW QUESTION 74
Performing a penetration test against an environment with SCADA devices brings additional safety risk because the:
- A. devices produce more heat and consume more power.
- B. protocols are more difficult to understand.
- C. devices are obsolete and are no longer available for replacement.
- D. devices may cause physical world effects.
Answer: B
NEW QUESTION 75
......
CompTIA PT0-002 Exam Practice Test Questions: https://www.updatedumps.com/CompTIA/PT0-002-updated-exam-dumps.html
Updated Certification Exam PT0-002 Dumps - Practice Test Questions: https://drive.google.com/open?id=1KbIyFCn2OnGUOQUdBFrKOztQAVLQvUoD