CompTIA CompTIA PenTest+ PT0-001 Questions & Answers

• Question 301:

  You are a penetration tester reviewing a client's website through a web browser.

  INSTRUCTIONS

  Review all components of the website through the browser to determine if vulnerabilities are present.

  Remediate ONLY the highest vulnerability from either the certificate, source, or cookies.

  If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

  

  

  

  Select and Place:

  

  Correct Answer:

  

• Question 302:

  DRAG DROP

  Place each of the following passwords in order of complexity from least complex (1) to most complex (4), based on the character sets represented Each password may be used only once.

  Select and Place:

  

  Correct Answer:

  

• Question 303:

  DRAG DROP

  A manager calls upon a tester to assist with diagnosing an issue within the following:

  Python script: #!/usr/bin/python s = “Administrator”

  The tester suspects it is an issue with string slicing and manipulation Analyze the following code segment and drag and drop the correct output for each string manipulation to its corresponding code segment Options may be used once or not at all.

  Select and Place:

  

  Correct Answer:

  

• Question 304:

  DRAG DROP

  Instructions:

  Analyze the code segments to determine which sections are needed to complete a port scanning script.

  Drag the appropriate elements into the correct locations to complete the script.

  If at any time you would like to bring back the initial state of the simulation, please click the reset all button.

  During a penetration test, you gain access to a system with a limited user interface. This machine appears to have access to an isolated network that you would like to port scan.

  Select and Place:

  

  Correct Answer:

  

  

• Question 305:

  DRAG DROP

  A technician is reviewing the following report. Given this information, identify which vulnerability can be definitively confirmed to be a false positive by dragging the “false positive” token to the “Confirmed” column for each vulnerability that is a false positive.

  Select and Place:

  

  Correct Answer:

  

• Question 306:

  SIMULATION

  You are a penetration tester running port scans on a server.

  INSTRUCTIONS

  Part1: Given the output, construct the command that was used to generate this output from the available options.

  Part2: Once the command is appropriately constructed, use the given output to identify the potential attack vectors that should be investigated further.

  If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

  Part1

  

  Part2

  

  Correct Answer: See explanation below.

  Part 1 – nmap 192.168.2.2 -sV -O Part 2 – Weak SMB file permissions