[2021] Valid PT0-001 test answers & CompTIA PT0-001 exam pdf
Verified PT0-001 dumps Q&As - Pass Guarantee or Full Refund
NEW QUESTION 93
Which of the following BEST describes some significant security weaknesses with an ICS, such as those used in electrical utility facilities, natural gas facilities, dams, and nuclear facilities?
- A. There is a lack of compliance for ICS facilities.
- B. ICS vendors are slow to implement adequate security controls.
- C. ICS staff are not adequately trained to perform basic duties.
- D. There is a scarcity of replacement equipment for critical devices.
Answer: C
NEW QUESTION 94
A consultant is attempting to harvest credentials from unsecure network protocols in use by the organization.
Which of the following commands should the consultant use?
- A. Tcmpump
- B. John
- C. Hashcat
- D. nc
Answer: A
NEW QUESTION 95
A client is asking a penetration tester to evaluate a new web application for availability.
Which of the following types of attacks should the tester use?
- A. TCP SYN flood
- B. SQL injection
- C. XMAS scan
- D. xss
Answer: A
NEW QUESTION 96
A manager calls upon a tester to assist with diagnosing an issue within the following Python script:
#!/usr/bin/python
s = "Administrator"
The tester suspects it is an issue with string slicing and manipulation Analyze the following code segment and drag and drop the correct output for each string manipulation to its corresponding code segment Options may be used once or not at all
Answer:
Explanation:
NEW QUESTION 97
A penetration tester has been asked to conduct OS fingering with Nmap using a company-provided text file that contains a list of IP addresses. Which of the following are needed to conduct this scan? (Choose two.).
- A. -V
- B. -oX
- C. -O
- D. -iL
- E. oN
- F. -sS
Answer: D,E
Explanation:
Explanation
Reference
https://securitytrails.com/blog/top-15-nmap-commands-to-scan-remote-hosts#six-scan-hosts-and-ip-addresses-re
NEW QUESTION 98
A penetration tester is connected to a client's local network and wants to passively identify cleartext protocols and potentially sensitive data being communicated across the network. Which of the following is the BEST approach to take?
- A. Run a network vulnerability scan.
- B. Run an MITM attack.
- C. Run a port scan.
- D. Run a stress test.
Answer: B
Explanation:
Explanation/Reference: https://www.sciencedirect.com/topics/computer-science/encrypted-protocol
NEW QUESTION 99
Given the following Python script:
Which of the following is where the output will go?
- A. To /dev/null
- B. To the screen
- C. To a file
- D. To a network server
Answer: C
NEW QUESTION 100
A company planned for and secured the budget to hire a consultant to perform a web application penetration test. Upon discovered vulnerabilities, the company asked the consultant to perform the following tasks:
* Code review
* Updates to firewall setting
- A. Post-mortem review
- B. Risk acceptance
- C. Scope creep
- D. Threat prevention
Answer: D
NEW QUESTION 101
DRAG DROP
During a penetration test, you gain access to a system with a limited user interface. This machine appears to have access to an isolated network that you would like to port scan.
INSTRUCTIONS:
Analyze the code segments to determine which sections are needed to complete a port scanning script.
Drag the appropriate elements into the correct locations to complete the script.
Answer:
Explanation:
NEW QUESTION 102
Which of the following tools is used to perform a credential brute force attack?
- A. Peach
- B. John the Ripper
- C. Hydra
- D. Hashcat
Answer: C
Explanation:
Reference:
https://www.greycampus.com/blog/information-security/brute-force-attacks-prominent-tools-totackle-such-attacks
NEW QUESTION 103
After gaining initial low-privilege access to a Linux system, a penetration tester identifies an interesting binary in a user's folder titled "changepass"
-sr -xr -x 1 root root 6443 Oct 18 2017 /home/user/changepass
Using "strings" to print ASCII printable characters from changepass, the tester notes the following:
$ strings changepass
Exit
setuid
strmp
GLINC _2.0
ENV_PATH
%s/changepw
malloc
strlen
Given this information, which of the following is the MOST likely path of exploitation to achieve root privileges on the machines?
- A. Run changepass within the current directory with sudo after exporting the ENV_PATH environmental variable to the path of '/usr/local/bin'
- B. Create a copy of changepass in the same directory, naming it changpw. Export the ENV_PATH environmental variable to the path "/home/user'. Then run changepass
- C. Copy changepass to a writable directory and export the ENV_PATH environmental variable to the path of a token-stealing binary titled changepw. Then run changepass
- D. Export the ENV_PATH environmental variable to the path of a writable directory that contains a token-stealing binary title changepw
Answer: A
NEW QUESTION 104
A penetration tester wants to target NETBIOS name service. Which of the following is the MOST likely command to exploit the NETBIOS name service?
- A. arpspoof
- B. nmap
- C. burpsuite
- D. responder
Answer: B
Explanation:
Explanation/Reference: http://www.hackingarticles.in/netbios-and-smb-penetration-testing-on-windows/
NEW QUESTION 105
Which of the following attacks is commonly combined with cross-site scripting for session hijacking?
- A. RFI
- B. SQLI
- C. CSRF
- D. Clickjacking
Answer: C
NEW QUESTION 106
A penetration tester is able to move laterally throughout a domain with minimal roadblocks after compromising a single workstation. Which of the following mitigation strategies would be BEST to recommend in the report?
(Select THREE).
- A. Enable full-disk encryption on every workstation.
- B. Apply additional network access control.
- C. Segment each host into its own VLAN.
- D. Randomize local administrator credentials for each machine.
- E. Disable remote logons for local administrators.
- F. Increase minimum password complexity requirements.
- G. Require multifactor authentication for all logins.
Answer: B,F,G
NEW QUESTION 107
During an internal network penetration test the tester is able to compromise a Windows system and recover the NTLM hash for a local wrltsrnAdrain account Attempting to recover the plaintext password by cracking the hash has proved to be unsuccessful, and the tester has decided to try a pass-the-hash attack to see if the credentials are reused on other in-scope systems Using the Medusa tool the tester attempts to authenticate to a list of systems, including the originally compromised host, with no success Given the output below:
Which of the following Medusa commands would potentially provide better results?
- A. #medusa -h hosts.txt -U usera.txt -P hashes, txt -M smbnt. -m GROP:LOCAL -O out.txt -m PASS:HASH
- B. #medusa -H hosts.txt -u WrkStnAdmin -p
aa3b435b51404eeaa3b435b51404ee:4e63c1b137e274dda214154b349fe316 -M smbnt -m GROUP:DOMAIN -o out.txt - C. #medusa -H hosts.txt -C creds.txt -M mssq1 -m GROUP: DOMAIN -o out.txt
- D. #medusa -H hosts.txt -U users, txt -P hashes, txt -M smbnt -m PASS:HASH -o out. txt
Answer: A
NEW QUESTION 108
After several attempts, an attacker was able to gain unauthorized access through a biometric sensor using the attacker's actual fingerprint without exploitation. Which of the following is the MOST likely explanation of what happened?
- A. The biometnc device duplicated a valid user's fingerpnnt.
- B. The biometric device is tuned more toward false positives
- C. The biometric device is configured more toward true negatives
- D. The biometric device is set to fail closed
Answer: B
NEW QUESTION 109
A penetration tester is preparing to conduct API testing. Which of the following would be MOST helpful in preparing for this engagement?
- A. W3AF
- B. Swagger
- C. WAR
- D. Nikto
Answer: B
Explanation:
Explanation/Reference:
Reference: https://blog.securelayer7.net/api-penetration-testing-with-owasp-2017-test-cases/
NEW QUESTION 110
......
CompTIA PenTest+ Exam Certification Details:
| Schedule Exam | Pearson VUE |
| Exam Name | CompTIA PenTest+ |
| Exam Price | $370 (USD) |
| Number of Questions | 85 |
| Duration | 165 mins |
| Passing Score | 750 / 900 |
| Exam Code | PT0-001 |
| Books / Training | CompTIA PenTest+ Certification Training |
| Sample Questions | CompTIA PenTest+ Sample Questions |
PT0-001 Exam Questions – Valid PT0-001 Dumps Pdf: https://www.passexamdumps.com/PT0-001-valid-exam-dumps.html
PT0-001 PDF Dumps Recently Updated Questions: https://drive.google.com/open?id=1_4TnUIUsTOwsCwiWFf6qLR4mNZf4LW2K
