2022 Realistic PT0-002 Dumps Latest CompTIA Practice Tests Dumps
PT0-002 Dumps PDF - PT0-002 Real Exam Questions Answers
NEW QUESTION 58
The results of an Nmap scan are as follows:
Starting Nmap 7.80 ( https://nmap.org ) at 2021-01-24 01:10 EST
Nmap scan report for ( 10.2.1.22 )
Host is up (0.0102s latency).
Not shown: 998 filtered ports
Port State Service
80/tcp open http
|_http-title: 80F 22% RH 1009.1MB (text/html)
|_http-slowloris-check:
| VULNERABLE:
| Slowloris DoS Attack
| <..>
Device type: bridge|general purpose
Running (JUST GUESSING) : QEMU (95%)
OS CPE: cpe:/a:qemu:qemu
No exact OS matches found for host (test conditions non-ideal).
OS detection performed. Please report any incorrect results at https://nmap.org/submit/.
Nmap done: 1 IP address (1 host up) scanned in 107.45 seconds
Which of the following device types will MOST likely have a similar response? (Choose two.)
- A. Active Directory domain controller
- B. IoT/embedded device
- C. Print queue
- D. Public-facing web server
- E. Exposed RDP
- F. Network device
Answer: D,F
NEW QUESTION 59
A penetration tester who is performing a physical assessment of a company's security practices notices the company does not have any shredders inside the office building. Which of the following techniques would be BEST to use to gain confidential information?
- A. Shoulder surfing
- B. Dumpster diving
- C. Badge cloning
- D. Tailgating
Answer: B
NEW QUESTION 60
A company is concerned that its cloud VM is vulnerable to a cyberattack and proprietary data may be stolen. A penetration tester determines a vulnerability does exist and exploits the vulnerability by adding a fake VM instance to the IaaS component of the client's VM. Which of the following cloud attacks did the penetration tester MOST likely implement?
- A. Cross-site scripting
- B. Credential harvesting
- C. Direct-to-origin
- D. Malware injection
Answer: C
NEW QUESTION 61
A penetration tester runs a scan against a server and obtains the following output:
21/tcp open ftp Microsoft ftpd
| ftp-anon: Anonymous FTP login allowed (FTP code 230)
| 03-12-20 09:23AM 331 index.aspx
| ftp-syst:
135/tcp open msrpc Microsoft Windows RPC
139/tcp open netbios-ssn Microsoft Windows netbios-ssn
445/tcp open microsoft-ds Microsoft Windows Server 2012 Std
3389/tcp open ssl/ms-wbt-server
| rdp-ntlm-info:
| Target Name: WEB3
| NetBIOS_Computer_Name: WEB3
| Product_Version: 6.3.9600
|_ System_Time: 2021-01-15T11:32:06+00:00
8443/tcp open http Microsoft IIS httpd 8.5
| http-methods:
|_ Potentially risky methods: TRACE
|_http-server-header: Microsoft-IIS/8.5
|_http-title: IIS Windows Server
Which of the following command sequences should the penetration tester try NEXT?
- A. ncrack -u Administrator -P 15worst_passwords.txt -p rdp 192.168.53.23
- B. curl -X TRACE https://192.168.53.23:8443/index.aspx
- C. nmap --script vuln -sV 192.168.53.23
- D. smbclient \\\\WEB3\\IPC$ -I 192.168.53.23 -U guest
- E. ftp 192.168.53.23
Answer: E
NEW QUESTION 62
A software development team is concerned that a new product's 64-bit Windows binaries can be deconstructed to the underlying code. Which of the following tools can a penetration tester utilize to help the team gauge what an attacker might see in the binaries?
- A. OllyDbg
- B. GDB
- C. Immunity Debugger
- D. Drozer
Answer: A
NEW QUESTION 63
A penetration tester discovers during a recent test that an employee in the accounting department has been making changes to a payment system and redirecting money into a personal bank account. The penetration test was immediately stopped. Which of the following would be the BEST recommendation to prevent this type of activity in the future?
- A. Enforce mandatory employee vacations
- B. Implement multifactor authentication
- C. Encrypt passwords for bank account information
- D. Install video surveillance equipment in the office
Answer: B
NEW QUESTION 64
Which of the following web-application security risks are part of the OWASP Top 10 v2017? (Choose two.)
- A. Ransomware attacks
- B. Zero-day attacks
- C. Injection flaws
- D. Race-condition attacks
- E. Cross-site scripting
- F. Buffer overflows
Answer: E,F
NEW QUESTION 65
A security professional wants to test an IoT device by sending an invalid packet to a proprietary service listening on TCP port 3011. Which of the following would allow the security professional to easily and programmatically manipulate the TCP header length and checksum using arbitrary numbers and to observe how the proprietary service responds?
- A. tcpdump
- B. Nmap
- C. hping3
- D. Scapy
Answer: B
NEW QUESTION 66
A penetration tester has been contracted to review wireless security. The tester has deployed a malicious wireless AP that mimics the configuration of the target enterprise WiFi. The penetration tester now wants to try to force nearby wireless stations to connect to the malicious AP. Which of the following steps should the tester take NEXT?
- A. Modify the malicious AP configuration to not use a pre-shared key.
- B. Perform jamming on all 2.4GHz and 5GHz channels.
- C. Send deauthentication frames to the stations.
- D. Set the malicious AP to broadcast within dynamic frequency selection channels.
Answer: D
NEW QUESTION 67
A penetration tester wrote the following script to be used in one engagement:
Which of the following actions will this script perform?
- A. Attempt to flood open ports.
- B. Create an encrypted tunnel.
- C. Look for open ports.
- D. Listen for a reverse shell.
Answer: C
NEW QUESTION 68
A penetration tester needs to perform a test on a finance system that is PCI DSS v3.2.1 compliant. Which of the following is the MINIMUM frequency to complete the scan of the system?
- A. Quarterly
- B. Weekly
- C. Annually
- D. Monthly
Answer: B
NEW QUESTION 69
A penetration tester has obtained shell access to a Windows host and wants to run a specially crafted binary for later execution using the wmic.exe process call create function. Which of the following OS or filesystem mechanisms is MOST likely to support this objective?
- A. PsExec
- B. PowerShell modules
- C. Alternate data streams
- D. MP4 steganography
Answer: A
NEW QUESTION 70
Which of the following documents describes specific activities, deliverables, and schedules for a penetration tester?
- A. NDA
- B. SOW
- C. MSA
- D. MOU
Answer: B
NEW QUESTION 71
The results of an Nmap scan are as follows:
Which of the following would be the BEST conclusion about this device?
- A. This device is most likely a proxy server forwarding requests over TCP/443.
- B. This device may be vulnerable to the Heartbleed bug due to the way transactions over TCP/22 handle heartbeat extension packets, allowing attackers to obtain sensitive information from process memory.
- C. This device may be vulnerable to remote code execution because of a butter overflow vulnerability in the method used to extract DNS names from packets prior to DNSSEC validation.
- D. This device is most likely a gateway with in-band management services.
Answer: B
NEW QUESTION 72
A company that requires minimal disruption to its daily activities needs a penetration tester to perform information gathering around the company's web presence. Which of the following would the tester find MOST helpful in the initial information-gathering steps? (Choose two.)
- A. Internet search engines
- B. DNS forward and reverse lookups
- C. Shodan results
- D. IP addresses and subdomains
- E. Zone transfers
- F. Externally facing open ports
Answer: D,E
NEW QUESTION 73
A penetration tester conducted an assessment on a web server. The logs from this session show the following:
http://www.thecompanydomain.com/servicestatus.php?serviceID=892&serviceID=892 ' ; DROP TABLE SERVICES; -- Which of the following attacks is being attempted?
- A. Cross-site scripting
- B. Parameter pollution
- C. Cookie hijacking
- D. Clickjacking
- E. Session hijacking
Answer: B
NEW QUESTION 74
A security engineer identified a new server on the network and wants to scan the host to determine if it is running an approved version of Linux and a patched version of Apache. Which of the following commands will accomplish this task?
- A. nmap -f -sV -p80 192.168.1.20
- B. nmap -O -v -p80 192.168.1.20
- C. nmap -A -T4 -p80 192.168.1.20
- D. nmap -sS -sL -p80 192.168.1.20
Answer: C
NEW QUESTION 75
A penetration tester performs the following command:
curl -I -http2 https://www.comptia.org
Which of the following snippets of output will the tester MOST likely receive?
- A. Option A
- B. Option B
- C. Option D
- D. Option C
Answer: A
NEW QUESTION 76
A penetration tester wants to scan a target network without being detected by the client's IDS. Which of the following scans is MOST likely to avoid detection?
- A. nmap -sA -sV --host-timeout 60 192.168.1.10
- B. nmap -p0 -T0 -sS 192.168.1.10
- C. nmap -f --badsum 192.168.1.10
- D. nmap -A -n 192.168.1.10
Answer: A
NEW QUESTION 77
......
PT0-002 Premium Exam Engine pdf Download: https://www.torrentvce.com/PT0-002-valid-vce-collection.html
PT0-002 Exam [2022] Dumps CompTIA PDF Questions: https://drive.google.com/open?id=1PFVn2mkkRBeOAWvY7Uae35W3ZewCHgtT