Passed Exam Today PT0-002

CompTIA PenTest+ Certification Exam Questions and Answers

Question 13

A penetration tester is looking for a vulnerability that enables attackers to open doors via a specialized TCP service that is used for a physical access control system. The service exists on more than 100 different hosts, so the tester would like to automate the assessment. Identification requires the penetration tester to:

Have a full TCP connection

Send a “hello” payload

Walt for a response

Send a string of characters longer than 16 bytes

Which of the following approaches would BEST support the objective?

Options:

Run nmap –Pn –sV –script vuln .

Employ an OpenVAS simple scan against the TCP port of the host.

Create a script in the Lua language and use it with NSE.

Perform a credentialed scan with Nessus.

Question 14

In an unprotected network file repository, a penetration tester discovers a text file containing usernames and passwords in cleartext and a spreadsheet containing data for 50 employees, including full names, roles, and serial numbers. The tester realizes some of the passwords in the text file follow the format: . Which of the following would be the best action for the tester to take NEXT with this information?

Options:

Create a custom password dictionary as preparation for password spray testing.

Recommend using a password manage/vault instead of text files to store passwords securely.

Recommend configuring password complexity rules in all the systems and applications.

Document the unprotected file repository as a finding in the penetration-testing report.

Question 15

A penetration tester was able to gain access successfully to a Windows workstation on a mobile client’s laptop. Which of the following can be used to ensure the tester is able to maintain access to the system?

Options:

schtasks /create /sc /ONSTART /tr C:\Temp\WindowsUpdate.exe

wmic startup get caption,command

crontab –l; echo “@reboot sleep 200 && ncat –lvp 4242 –e /bin/bash”) | crontab 2>/dev/null

sudo useradd –ou 0 –g 0 user

Question 16

A penetration tester needs to access a building that is guarded by locked gates, a security team, and cameras. Which of the following is a technique the tester can use to gain access to the IT framework without being detected?

Options:

Pick a lock.

Disable the cameras remotely.

Impersonate a package delivery worker.

Send a phishing email.

11.11 Special 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

CompTIA PenTest+ Certification Exam Questions and Answers

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Options:

Answer:

CompTIA

Fortinet

Microsoft

Salesforce