CompTIA PT0-002 CompTIA PenTest+ Certification Exam Online Training
CompTIA PT0-002 Online Training
The questions for PT0-002 were last updated at Nov 26,2024.
- Exam Code: PT0-002
- Exam Name: CompTIA PenTest+ Certification Exam
- Certification Provider: CompTIA
- Latest update: Nov 26,2024
autonumCORRECT TEXT
SIMULATION
Using the output, identify potential attack vectors that should be further investigated.
autonumDuring an assessment, a penetration tester was able to access the organization’s wireless network from outside of the building using a laptop running Aircrack-ng.
Which of the following should be recommended to the client to remediate this issue?
- A . Changing to Wi-Fi equipment that supports strong encryption
- B . Using directional antennae
- C . Using WEP encryption
- D . Disabling Wi-Fi
autonumA penetration tester was contracted to test a proprietary application for buffer overflow vulnerabilities.
Which of the following tools would be BEST suited for this task?
- A . GDB
- B . Burp Suite
- C . SearchSpliot
- D . Netcat
autonumDuring an assessment, a penetration tester obtains a list of 30 email addresses by crawling the target company’s website and then creates a list of possible usernames based on the email address format.
Which of the following types of attacks would MOST likely be used to avoid account lockout?
- A . Mask
- B . Rainbow
- C . Dictionary
- D . Password spraying
autonumWhich of the following documents is agreed upon by all parties associated with the penetration-testing engagement and defines the scope, contacts, costs, duration, and deliverables?
- A . SOW
- B . SLA
- C . MSA
- D . NDA
autonumIn Python socket programming, SOCK_DGRAM type is:
- A . reliable.
- B . matrixed.
- C . connectionless.
- D . slower.
autonumA penetration tester needs to perform a test on a finance system that is PCI DSS v3.2.1 compliant.
Which of the following is the MINIMUM frequency to complete the scan of the system?
- A . Weekly
- B . Monthly
- C . Quarterly
- D . Annually
autonumA penetration tester is trying to restrict searches on Google to a specific domain.
Which of the following commands should the penetration tester consider?
- A . inurl:
- B . link:
- C . site:
- D . intitle:
autonumA penetration tester, who is doing an assessment, discovers an administrator has been exfiltrating proprietary company information. The administrator offers to pay the tester to keep quiet.
Which of the following is the BEST action for the tester to take?
- A . Check the scoping document to determine if exfiltration is within scope.
- B . Stop the penetration test.
- C . Escalate the issue.
- D . Include the discovery and interaction in the daily report.
autonumA penetration tester runs the following command on a system:
find / -user root Cperm -4000 Cprint 2>/dev/null
Which of the following is the tester trying to accomplish?
- A . Set the SGID on all files in the / directory
- B . Find the /root directory on the system
- C . Find files with the SUID bit set
- D . Find files that were created during exploitation and move them to /dev/null