Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home CompTIA PT0-002

CompTIA PT0-002 Exam Practice Questions (P. 4)

  • Full Access (531 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #31
A penetration tester logs in as a user in the cloud environment of a company.
Which of the following Pacu modules will enable the tester to determine the level of access of the existing user?
  1. A
    iam_enum_permissions
  2. B
    iam_prive_sc_scan
  3. C
    iam_backdoor_assume_role
  4. D
    iam_bruteforce_permissions

Correct Answer:
A

Question #32
A company becomes concerned when the security alarms are triggered during a penetration test.
Which of the following should the company do NEXT?
  1. A
    Halt the penetration test.
  2. B
    Conduct an incident response.
  3. C
    Deconflict with the penetration tester.
  4. D
    Assume the alert is from the penetration test.

Correct Answer:
B

Question #33
A penetration tester has been hired to perform a physical penetration test to gain access to a secure room within a client's building. Exterior reconnaissance identifies two entrances, a WiFi guest network, and multiple security cameras connected to the Internet.
Which of the following tools or techniques would BEST support additional reconnaissance?
  1. A
    Wardriving
  2. B
    Shodan
  3. C
    Recon-ng
  4. D
    Aircrack-ng

Correct Answer:
C

Question #34
A red team gained access to the internal network of a client during an engagement and used the Responder tool to capture important data.
Which of the following was captured by the testing team?
  1. A
    Multiple handshakes
  2. B
    IP addresses
  3. C
    Encrypted file transfers
  4. D
    User hashes sent over SMB

Correct Answer:
D

Question #35
A penetration tester conducts an Nmap scan against a target and receives the following results:

Which of the following should the tester use to redirect the scanning tools using TCP port 1080 on the target?
  1. A
    Nessus
  2. B
    ProxyChains
  3. C
    OWASP ZAP
  4. D
    Empire

Correct Answer:
B
Reference:
https://www.codeproject.com/Tips/634228/How-to-Use-Proxychains-Forwarding-Ports

Question #36
A penetration tester who is doing a security assessment discovers that a critical vulnerability is being actively exploited by cybercriminals.
Which of the following should the tester do NEXT?
  1. A
    Reach out to the primary point of contact.
  2. B
    Try to take down the attackers.
  3. C
    Call law enforcement officials immediately.
  4. D
    Collect the proper evidence and add to the final report.

Correct Answer:
A

Question #37
A penetration tester received a .pcap file to look for credentials to use in an engagement.
Which of the following tools should the tester utilize to open and read the .pcap file?
  1. A
    Nmap
  2. B
    Wireshark
  3. C
    Metasploit
  4. D
    Netcat

Correct Answer:
B

Question #38
A penetration tester ran an Nmap scan on an Internet-facing network device with the -F option and found a few open ports. To further enumerate, the tester ran another scan using the following command: nmap -O -A -sS -p- 100.100.100.50
Nmap returned that all 65,535 ports were filtered
Which of the following MOST likely occurred on the second scan?
  1. A
    A firewall or IPS blocked the scan.
  2. B
    The penetration tester used unsupported flags.
  3. C
    The edge network device was disconnected.
  4. D
    The scan returned ICMP echo replies.

Correct Answer:
A

Question #39
A penetration tester is looking for a vulnerability that enables attackers to open doors via a specialized TCP service that is used for a physical access control system. The service exists on more than 100 different hosts, so the tester would like to automate the assessment. Identification requires the penetration tester to:
✑ Have a full TCP connection
✑ Send a `hello` payload
✑ Wait for a response
✑ Send a string of characters longer than 16 bytes
Which of the following approaches would BEST support the objective?
  1. A
    Run nmap -Pn -sV --script vuln <IP address>.
  2. B
    Employ an OpenVAS simple scan against the TCP port of the host.
  3. C
    Create a script in the Lua language and use it with NSE.
  4. D
    Perform a credentialed scan with Nessus.

Correct Answer:
D

Question #40
Performing a penetration test against an environment with SCADA devices brings an additional safety risk because the:
  1. A
    devices produce more heat and consume more power.
  2. B
    devices are obsolete and are no longer available for replacement.
  3. C
    protocols are more difficult to understand.
  4. D
    devices may cause physical world effects.

Correct Answer:
C

Previous Questions Next Questions

All Pages