CompTIA CompTIA PenTest+ PT0-001 Questions & Answers

• Question 1:

  Which of the following exploits a vulnerability associated with IoT devices?

  A. Blue snarfing

  B. Simple certificate enrollment

  C. Heartbleed

  D. Mirai botnet

  Correct Answer: D

  Reference: https://en.wikipedia.org/wiki/Mirai_(malware)

• Question 2:

  A web application scanner reports that a website is susceptible to clickjacking. Which of the following techniques would BEST prove exploitability?

  A. Redirect the user with a CSRF.

  B. Launch the website in an iFRAME.

  C. Pull server headers.

  D. Capture and replay a session ID.

  Correct Answer: B

  Reference: https://www.imperva.com/learn/application-security/clickjacking/

• Question 3:

  A penetration testing company is performing a penetration test against Company A. Company A has provided the IP address range 10.0.0.0/24 as its in-scope network range. During the information gathering phase, the penetration tester is asked to conduct active information-gathering techniques. Which of the following is the BEST tool to use for active information gathering?

  A. hping3

  B. theHarvester

  C. tcpdump

  D. Nmap

  Correct Answer: D

• Question 4:

  Given the following Python code:

  a = 'abcdefghijklmnop'a[::2]

  Which of the following will result?

  A. adgjmp

  B. pnlhfdb

  C. acegikmo

  D. ab

  Correct Answer: C

  Reference: https://blog.finxter.com/python-double-colon/

• Question 5:

  Which of the following describe a susceptibility present in Android-based commercial mobile devices when organizations are not employing MDM services? (Choose two.)

  A. Configurations are user-customizable.

  B. End users have root access to devices by default.

  C. Push notification services require Internet access.

  D. Unsigned apps can be installed.

  E. The default device log facility does not record system actions.

  F. IPSec VPNs are not configurable.

  Correct Answer: AD

• Question 6:

  When calculating the sales price of a penetration test to a client, which of the following is the MOST important aspect to understand?

  A. The operating cost

  B. The client's budget

  C. The required scope of work

  D. The non-disclosure agreement

  Correct Answer: C

• Question 7:

  Which of the following would BEST prevent fence jumping at a facility?

  A. Install proper lighting around the perimeter of the facility.

  B. Decrease the distance between the links in the fence.

  C. Add a top guard on the fence that faces away from the facility.

  D. Place video cameras that are angled toward the fence.

  Correct Answer: A

• Question 8:

  Which of the following tools can be used to perform a basic remote vulnerability scan of a website's configuration?

  A. Mimikatz

  B. BeEF

  C. Nikto

  D. Patator

  Correct Answer: C

  Reference: https://www.freecodecamp.org/news/an-introduction-to-web-server-scanning-with-nikto/

• Question 9:

  When considering threat actor scoping prior to an engagement, which of the following characteristics makes an APT challenging to emulate?

  A. Development of custom zero-day exploits and tools

  B. Leveraging the dark net for non-attribution

  C. Tenacity and efficacy of social engineering attacks

  D. Amount of bandwidth available for DoS attacks

  Correct Answer: C

• Question 10:

  During a penetration test, a host is discovered that appears to have been previously compromised and has an active outbound connection. After verifying the network activity is malicious, which of the following should the tester do?

  A. Inform the client to shut it down and investigate.

  B. Take action and shut it down immediately.

  C. Inform the client and allow them to respond.

  D. Note the finding and continue the assessment.

  Correct Answer: C