CompTIA PT0-001 Online Practice Questions and Exam Preparation

CompTIA PT0-001 Online Questions & Answers

• Question 11:

  A penetration tester must assess a web service. Which of the following should the tester request during the scoping phase?

  A. XSD
  B. After-hours contact escalation
  C. WSDLfile
  D. SOAP project file
  C. WSDLfile

• Question 12:

  A penetration tester observes that several high numbered ports are listening on a public web server. However, the system owner says the application only uses port 443. Which of the following would be BEST to recommend?

  A. Transition the application to another port
  B. Filter port 443 to specific IP addresses
  C. Implement a web application firewall
  D. Disable unneeded services.
  D. Disable unneeded services.

• Question 13:

  A penetration tester is utilizing social media to gather information about employees at a company. The tester has created a list of popular words used in employee profile s. For which of the following types of attack would this information be used?

  A. Exploit chaining
  B. Session hijacking
  C. Dictionary
  D. Karma
  C. Dictionary

• Question 14:

  During a penetration test, a tester identifies traditional antivirus running on the exploited server. Which of the following techniques would BEST ensure persistence in a post-exploitation phase?

  A. Shell binary placed in C:\windows\temp
  B. Modified daemons
  C. New user creation
  D. Backdoored executables
  B. Modified daemons

• Question 15:

  Which of the following CPU registers does the penetration tester need to overwrite in order to exploit a simple buffer overflow?

  A. Stack pointer register
  B. Index pointer register
  C. Stack base pointer
  D. Destination index register
  A. Stack pointer register

• Question 16:

  During a physical security review, a detailed penetration testing report was obtained, which was issued to a security analyst and then discarded in the trash. The report contains validated critical risk exposures. Which of the following processes would BEST protect this information from being disclosed in the future?

  A. Restrict access to physical copies to authorized personnel only.
  B. Ensure corporate policies include guidance on the proper handling of sensitive information.
  C. Require only electronic copies of all documents to be maintained.
  D. Install surveillance cameras near all garbage disposal areas.
  B. Ensure corporate policies include guidance on the proper handling of sensitive information.

• Question 17:

  A penetration tester wants to target NETBIOS name service. Which of the following is the most likely command to exploit the NETBIOS name service?

  A. arPspoof
  B. nmap
  C. responder
  D. burpsuite
  B. nmap

• Question 18:

  A penetration tester has discovered through automated scanning that a Tomcat server allows for the use of default credentials. Using default credentials, the tester is able to upload WAR files to the server. Which of the following is the MOST likely post-exploitation step?

  A. Upload a customized /etc/shadow file.
  B. Monitor network traffic
  C. Connect via SSH using default credentials.
  D. Install web shell on the server.
  D. Install web shell on the server.

• Question 19:

  A penetration tester notices that the X-Frame-Optjons header on a web application is not set. Which of the following would a malicious actor do to exploit this configuration setting?

  A. Use path modification to escape the application's framework.
  B. Create a frame that overlays the application.
  C. Inject a malicious iframe containing JavaScript.
  D. Pass an iframe attribute that is malicious.
  C. Inject a malicious iframe containing JavaScript.

• Question 20:

  Joe, a penetration tester, has received basic account credentials and logged into a Windows system. To escalate his privilege, from which of the following places is he using Mimikatz to pull credentials?

  A. LSASS
  B. SAM database
  C. Active Directory
  D. Registry
  C. Active Directory