CompTIA PenTest+ Study Guide Exam PT0-001 Dumps

1. A security analyst was provided with a detailed penetration report, which was performed against the organization’s DMZ environment. It was noted on the report that a finding has a CVSS base score of 100.

Which of the following levels of difficulty would be required to exploit this vulnerability?

2. A penetration tester has gained access to a marketing employee’s device. The penetration tester wants to ensure that if the access is discovered, control of the device can be regained.

Which of the actions should the penetration tester use to maintain persistence to the device? (Select TWO)

3. Which of the following tools is used to perform a credential brute force attack?

4. Which of the following situations would cause a penetration tester to communicate with a system owner/client during the course of a test? (Select Two)

5. A penetration tester has performed a security assessment for a startup firm. The report lists a total of ten vulnerabilities, with five identified as critical. The client does not have the remediate to immediately remediate all vulnerabilities.

Under such circumstances which of the following would be the BEST suggestion for the client?

6. Which of the following is the reason why a penetration tester would run the chkconfig --del servicename command at the end of an engagement?

7. A penetration tester wants to target NETBIOS name service.

Which of the following is the MOST likely command to exploit the NETBIOS name service?

8. A security consultant receives a document outlining the scope of an upcoming penetration test. This document contains IP addresses and times that each can be scanned.

Which of the following would contain this information?

9. A penetration tester executes the following commands:

C: >userprofile%jtr exe

This program has been blocked by group policy.

C:>accesschk.exe -w -s -q -u Users C:Windows

rw C:WindowsTracing

C:>copy %userprofilejtr.exe C:WindowsTracing

C:WindowsTracingjtr.exe

jtr version 3.2…

jtr>

Which of the following is a local host vulnerability that the attacker is exploiting?

10. A penetration tester reviews the scan results of a web application.

Which of the following vulnerabilities is MOST critical and should be prioritized for exploitation?

11. A penetration tester observes that several high-numbered ports are listening on a public web server. However, the system owner says the application only uses port 443.

Which of the following would be BEST to recommend?

12. A penetration tester was able to enter an SQL injection command into a text box and gain access to the information store on the database.

Which of the following is the BEST recommendation that would mitigate the vulnerability?

13. Black box penetration testing strategy provides the tester with

14. Which of the following tools would a penetration tester leverage to conduct OSINT? (Select TWO)

15. A penetration tester is performing ARP spoofing against a switch.

Which of the following should the penetration tester spoof to get the MOST information?

16. A penetration tester is able to move laterally throughout a domain with minimal roadblocks after compromising a single workstation.

Which of the following mitigation strategies would be BEST to recommend in the report? (Select THREE)

17. After successfully exploiting a local file inclusion vulnerability within a web application, a limited reverse shell is spawned back to the penetration testers workstation.

Which of the following can be used to escape the limited shell and create a fully functioning TTY?

18. Which of the following services is MOST likely to be found enabled on legacy RTOS deployments?

19. A client has requested an external network penetration test for compliance certification purposes. During discussion between the client and the penetration tester, the client expresses unwillingness to the penetration tester’s source IP addresses to the client’s IPS whitelist for the duration of the test.

Which of the following is the BEST argument as to why the penetration testers source IP addresses should be whitelisted?

20. An energy company contracted a security firm to perform a penetration test of a power plant, which employs ICS to manage power generation and cooling.

Which of the following is a consideration unique to such an environment that must be made by the firm when preparing for the assessment?

21. A healthcare organization must abide by local regulations to protect and attest to the protection of personal health information of covered individuals.

Which of the following conditions should a penetration tester specifically test for when performing an assessment? (Select Two)

22. Which of the following is an example of a pear phishing attack?