PT0-002 by CompTIA Actual Free Exam Q&As

Question 1

A penetration tester is conducting an engagement against an internet-facing web application and planning a phishing campaign. Which of the following is the BEST passive method of obtaining the technical contacts for the website?

A. Job listing and recruitment ads B. Public data breach dumps C. SSL certificate information D. WHOIS domain lookup

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 2

A penetration tester is trying to bypass an active response tool that blocks IP addresses that have more than 100 connections per minute. Which of the following commands would allow the tester to finish the test without being blocked?

A. nmap -sU -p 1-1024 10.0.0.15 B. nmap -T5 -p 1-65535 -A 10.0.0.15 C. nmap -p 22,25, 80, 3389 -T2 10.0.0.15 -Pn D. nmap -T3 -F 10.0.0.15

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 3

Penetration tester who was exclusively authorized to conduct a physical assessment noticed there were no cameras pointed at the dumpster for company. The penetration tester returned at night and collected garbage that contained receipts for recently purchased networking :. The models of equipment purchased are vulnerable to attack. Which of the following is the most likely next step for the penetration?

A. Return to the dumpster for more information. B. Alert the target company of the discovered information. C. Verify the discovered information is correct with the manufacturer. D. Scan the equipment and verify the findings.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 4

A penetration tester has been contracted to review wireless security. The tester has deployed a malicious wireless AP that mimics the configuration of the target enterprise WiFi. The penetration tester now wants to try to force nearby wireless stations to connect to the malicious AP. Which of the following steps should the tester take NEXT?

A. Modify the malicious AP configuration to not use a pre-shared key. B. Perform jamming on all 2.4GHz and 5GHz channels. C. Set the malicious AP to broadcast within dynamic frequency selection channels. D. Send deauthentication frames to the stations.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 5

A penetration tester is hired to test a client's systems. The client's systems are hosted by the client at its headquarters. The production environment is hosted by a private cloud-hosting company. Which of the following would be the most important for the penetration tester to determine before beginning the test?

A. Time-of-day restrictions B. Physical locations of the infrastructure C. Disallowed tests D. Third-party asset restrictions

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 6

Which of the following describes the reason why a penetration tester would run the command sdelete mimikatz. * on a Windows server that the tester compromised?

A. To remove tools from the server B. To remove hash-cracking registry entries C. To remove the tester-created Mimikatz account D. To remove a reverse shell from the system

Discussion 0

Correct Answer: C Vote an answer

Question 7

A penetration tester is testing a company's public API and discovers that specific input allows the execution of arbitrary commands on the base operating system. Which of the following actions should the penetration tester take next?

A. Include the findings in the final report. B. Use this feature to further compromise the server. C. Document which commands can be executed. D. Notify the client immediately.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 8

Which of the following documents is agreed upon by all parties associated with the penetration-testing engagement and defines the scope, contacts, costs, duration, and deliverables?

A. NDA B. SOW C. SLA D. MSA

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 9

Which of the following types of communication should a penetration tester provide a client to document test results for PCI DSS compliance?

A. Remediation plan B. Attestation of findings C. Testing methodology overview D. Executive summary

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

CompTIA PenTest+ Certification - PT0-002 Exam Practice Test