CompTIA PT0-001 Online Practice Questions and Exam Preparation

CompTIA PT0-001 Online Questions & Answers

• Question 31:

  A penetration tester is checking a script to determine why some basic math errors are persisting. The expected result was the program outputting “True”.

  

  Given the output from the console above, which of the following explains how to correct the errors in the script? (Choose two.)

  A. Change fi' to 'Endlf
  B. Remove the 'let' in front of 'dest=5+5'.
  C. Change the '=" to '-eq'.
  D. Change -Source* and 'dest' to "Ssource" and "Sdest"
  E. Change 'else' to 'elif.
  B. Remove the 'let' in front of 'dest=5+5'.
  D. Change -Source* and 'dest' to "Ssource" and "Sdest"

• Question 32:

  Which of the following is the BEST way to deploy vulnerability scanners with many networks segmented by firewalls with active IPS rules?

  A. Deploy a single scanner inside each network segment.
  B. Deploy many scanners inside one segment and allow any rules.
  C. Deploy one internal scanner and one external scanner.
  D. Deploy one internal scanner with heavy server resources.
  A. Deploy a single scanner inside each network segment.

• Question 33:

  Click the exhibit button.

  

  Given the Nikto vulnerability, scan output shown in the exhibit, which of the following exploitation techniques might be used to exploit the target system? (Choose two.)

  A. Arbitrary code execution
  B. Session hijacking
  C. SQL injection D. Login credential brute-forcing
  E. Cross-site request forgery
  B. Session hijacking

• Question 34:

  A company performed an annual penetration test of its environment. In addition to several new findings, all of the previously identified findings persisted on the latest report. Which of the following is the MOST likely reason?

  A. Infrastructure is being replaced with similar hardware and software.
  B. Systems administrators are applying the wrong patches.
  C. The organization is not taking action to remediate identified findings.
  D. The penetration testing tools were misconfigured.
  C. The organization is not taking action to remediate identified findings.

• Question 35:

  Which of the following tools would a penetration tester leverage to conduct OSINT? (Select TWO).

  A. Shodan
  B. SET
  C. BeEF
  D. Wireshark
  E. Maltego
  F. Dynamo
  A. Shodan
  E. Maltego

• Question 36:

  Given the following Python script:

  

  Which of the following actions will it perform?

  A. ARP spoofing
  B. Port scanner
  C. Reverse shell
  D. Banner grabbing
  D. Banner grabbing

• Question 37:

  Which of Ihe following commands would allow a penetration tester to access a private network from the Internet in Metasploit?

  A. set rhost 192.168.1.10
  B. run autoroute -a 192.168.1.0/24
  C. db_nm«p -iL /tmp/privatehoots . txt
  D. use auxiliary/servet/aocka^a
  B. run autoroute -a 192.168.1.0/24

• Question 38:

  DRAG DROP

  Place each of the following passwords in order of complexity from least complex (1) to most complex (4), based on the character sets represented Each password may be used only once.

  Select and Place:

  

  

• Question 39:

  Which of the following BEST describes some significant security weaknesses with an ICS, such as those used in electrical utility facilities, natural gas facilities, dams, and nuclear facilities?

  A. ICS vendors are slow to implement adequate security controls.
  B. ICS staff are not adequately trained to perform basic duties.
  C. There is a scarcity of replacement equipment for critical devices.
  D. There is a lack of compliance for ICS facilities.
  B. ICS staff are not adequately trained to perform basic duties.

• Question 40:

  Consumer-based IoT devices are often less secure than systems built for traditional desktop computers. Which of the following BEST describes the reasoning for this?

  A. Manufacturers developing IoT devices are less concerned with security.
  B. It is difficult for administrators to implement the same security standards across the board.
  C. IoT systems often lack the hardware power required by more secure solutions.
  D. Regulatory authorities often have lower security requirements for IoT systems.
  A. Manufacturers developing IoT devices are less concerned with security.