CompTIA PT0-001 Online Practice Questions and Exam Preparation

CompTIA PT0-001 Online Questions & Answers

• Question 1:

  A file contains several hashes. Which of the following can be used in a pass-the-hash attack?

  A. NTLMv2
  B. Kerberos
  C. NTLMv1
  D. LMv2
  E. NTLM
  B. Kerberos

• Question 2:

  Which of the following attacks is commonly combined with cross-site scripting for session hijacking?

  A. CSRF
  B. Clickjacking
  C. SQLI
  D. RFI
  A. CSRF

• Question 3:

  Given the following: http://example.com/download.php?id-.../.../.../etc/passwd Which of the following BEST describes the above attack?

  A. Malicious file upload attack
  B. Redirect attack
  C. Directory traversal attack
  D. Insecure direct object reference attack
  C. Directory traversal attack

• Question 4:

  After several attempts, an attacker was able to gain unauthorized access through a biometric sensor using the attacker's actual fingerprint without exploitation. Which of the following is the MOST likely explanation of what happened?

  A. The biometric device is tuned more toward false positives
  B. The biometric device is configured more toward true negatives
  C. The biometric device is set to fail closed
  D. The biometnc device duplicated a valid user's fingerpnnt.
  A. The biometric device is tuned more toward false positives

• Question 5:

  After establishing a shell on a target system, Joe, a penetration tester is aware that his actions have not been detected. He now wants to maintain persistent access to the machine. Which of the following methods would be MOST easily detected?

  A. Run a zero-day exploit.
  B. Create a new domain user with a known password.
  C. Modify a known boot time service to instantiate a call back.
  D. Obtain cleartext credentials of the compromised user.
  C. Modify a known boot time service to instantiate a call back.

• Question 6:

  A client has scheduled a wireless penetration test. Which of the following describes the scoping target information MOST likely needed before testing can begin?

  A. The physical location and network ESSIDs to be tested
  B. The number of wireless devices owned by the client
  C. The client's preferred wireless access point vendor
  D. The bands and frequencies used by the client's devices
  D. The bands and frequencies used by the client's devices

• Question 7:

  A company planned for and secured the budget to hire a consultant to perform a web application penetration test. Upon discovered vulnerabilities, the company asked the consultant to perform the following tasks:

  Code review Updates to firewall setting

  A. Scope creep
  B. Post-mortem review
  C. Risk acceptance
  D. Threat prevention
  D. Threat prevention

• Question 8:

  A penetration tester is outside of an organization's network and is attempting to redirect users to a fake password reset website hosted on the penetration tester's box. Which of the following techniques is suitable to attempt this?

  A. Employ NBNS poisoning.
  B. Perform ARP spoofing.
  C. Conduct a phishing campaign.
  D. Use an SSL downgrade attack.
  C. Conduct a phishing campaign.

• Question 9:

  During a penetration test, a tester runs a phishing campaign and receives a shell from an internal PC running Windows 10 OS. The tester wants to perform credential harvesting with Mimikatz.

  Which of the following registry changes would allow for credential caching in memory?

  A. reg add HKLM\System\ControlSet002\Control\SecurityProviders\WDigest /v userLogoCredential /t REG_DWORD /d 0
  B. reg add HKCU\System\CurrentControlSet\Control\SecurityProviders\WDigest /v userLogoCredential /t REG_DWORD /d 1
  C. reg add HKLM\Software\CurrentControlSet\Control\SecurityProviders\WDigest /v userLogoCredential /t REG_DWORD /d 1
  D. reg add HKLM\System\CurrentControlSet\Control\SecurityProviders\WDigest /v userLogoCredential /t REG_DWORD /d 1
  A. reg add HKLM\System\ControlSet002\Control\SecurityProviders\WDigest /v userLogoCredential /t REG_DWORD /d 0

• Question 10:

  A penetration tester is scanning a network for SSH and has a list of provided targets. Which of the following Nmap commands should the tester use?

  A. nmap -p 22 -iL targets
  B. nmap -p 22 -sL targets
  C. nmap -p 22 -oG targets
  D. nmap -p 22 -oA targets
  A. nmap -p 22 -iL targets