CompTIA CompTIA PenTest+ PT0-002 Questions & Answers

• Question 21:

  Given the following output:

  User-agent:*

  Disallow: /author/

  Disallow: /xmlrpc.php

  Disallow: /wp-admin

  Disallow: /page/

  During which of the following activities was this output MOST likely obtained?

  A. Website scraping

  B. Website cloning

  C. Domain enumeration

  D. URL enumeration

  Correct Answer: A

• Question 22:

  A penetration tester would like to obtain FTP credentials by deploying a workstation as an on-path attack between the target and the server that has the FTP protocol. Which of the following methods would be the BEST to accomplish this objective?

  A. Wait for the next login and perform a downgrade attack on the server.

  B. Capture traffic using Wireshark.

  C. Perform a brute-force attack over the server.

  D. Use an FTP exploit against the server.

  Correct Answer: B

  Reference: https://shahmeeramir.com/penetration-testing-of-an-ftp-server-19afe538be4b

• Question 23:

  A penetration tester is starting an assessment but only has publicly available information about the target company. The client is aware of this exercise and is preparing for the test. Which of the following describes the scope of the assessment?

  A. Partially known environment testing

  B. Known environment testing

  C. Unknown environment testing

  D. Physical environment testing

  Correct Answer: C

• Question 24:

  A penetration tester found the following valid URL while doing a manual assessment of a web application: http://www.example.com/product.php?id=123987.

  Which of the following automated tools would be best to use NEXT to try to identify a vulnerability in this URL?

  A. SQLmap

  B. Nessus

  C. Nikto

  D. DirBuster

  Correct Answer: B

• Question 25:

  A penetration tester is examining a Class C network to identify active systems quickly. Which of the following commands should the penetration tester use?

  A. nmap sn 192.168.0.1/16

  B. nmap sn 192.168.0.1-254

  C. nmap sn 192.168.0.1 192.168.0.1.254

  D. nmap sN 192.168.0.0/24

  Correct Answer: B

• Question 26:

  A penetration tester finds a PHP script used by a web application in an unprotected internal source code repository. After reviewing the code, the tester identifies the following:

  

  Which of the following tools will help the tester prepare an attack for this scenario?

  A. Hydra and crunch

  B. Netcat and cURL

  C. Burp Suite and DIRB

  D. Nmap and OWASP ZAP

  Correct Answer: B

• Question 27:

  Which of the following would assist a penetration tester the MOST when evaluating the susceptibility of top-level executives to social engineering attacks?

  A. Scraping social media for personal details

  B. Registering domain names that are similar to the target company's

  C. Identifying technical contacts at the company

  D. Crawling the company's website for company information

  Correct Answer: A

• Question 28:

  When planning a penetration-testing effort, clearly expressing the rules surrounding the optimal time of day for test execution is important because:

  A. security compliance regulations or laws may be violated.

  B. testing can make detecting actual APT more challenging.

  C. testing adds to the workload of defensive cyber- and threat-hunting teams.

  D. business and network operations may be impacted.

  Correct Answer: D

• Question 29:

  During the scoping phase of an assessment, a client requested that any remote code exploits discovered during testing would be reported immediately so the vulnerability could be fixed as soon as possible. The penetration tester did not agree with this request, and after testing began, the tester discovered a vulnerability and gained internal access to the system. Additionally, this scenario led to a loss of confidential credit card data and a hole in the system. At the end of the test, the penetration tester willfully failed to report this information and left the vulnerability in place. A few months later, the client was breached and credit card data was stolen. After being notified about the breach, which of the following steps should the company take NEXT?

  A. Deny that the vulnerability existed

  B. Investigate the penetration tester.

  C. Accept that the client was right.

  D. Fire the penetration tester.

  Correct Answer: B

• Question 30:

  During an engagement, a penetration tester found the following list of strings inside a file:

  

  Which of the following is the BEST technique to determine the known plaintext of the strings?

  A. Dictionary attack

  B. Rainbow table attack

  C. Brute-force attack

  D. Credential-stuffing attack

  Correct Answer: B