CompTIA PT0-001 Online Practice Questions and Exam Preparation

CompTIA PT0-001 Online Questions & Answers

• Question 301:

  An SMB server was discovered on the network, and the penetration tester wants to see if the server it vulnerable. Which of the following is a relevant approach to test this?

  A. Null sessions
  B. Xmas scan
  C. ICMP flood
  D. SYN flood
  C. ICMP flood

• Question 302:

  An attacker uses SET to make a copy of a company's cloud-hosted web mail portal and sends an email m to obtain the CEO s login credentials Which of the following types of attacks is this an example of?

  A. Elicitation attack
  B. Impersonation attack
  C. Spear phishing attack
  D. Drive-by download attack
  A. Elicitation attack

• Question 303:

  A penetration tester found a network with NAC enabled Which of the following commands can be used to bypass the NAC?

  A. macchanger
  B. sslbump
  C. iptafcles
  D. proxychains
  A. macchanger

• Question 304:

  The scope of a penetration test requires the tester to be stealthy when performing port scans. Which of the following commands with Nmap BEST supports stealthy scanning?

  A. -min-rate
  B. -max-length
  C. -host-timeout D. -max-rate
  C. -host-timeout D. -max-rate

• Question 305:

  When conducting reconnaissance against a target, which of the following should be used to avoid directory communicating with the target?

  A. Nmap tool
  B. Maltego community edition
  C. Nessus vulnerability scanner
  D. OpenVAS
  E. Melasploit
  B. Maltego community edition

• Question 306:

  A healthcare organization must abide by local regulations to protect and attest to the protection of personal health information of covered individuals. Which of the following conditions should a penetration tester specifically test for when performing an assessment? (Select TWO).

  A. Cleartext exposure of SNMP trap data
  B. Software bugs resident in the IT ticketing system
  C. S/MIME certificate templates defined by the CA
  D. Health information communicated over HTTP
  E. DAR encryption on records servers
  D. Health information communicated over HTTP
  E. DAR encryption on records servers