PT0-002 Practice Online

Question 1

Deconfliction is necessary when the penetration test:

A :

determines that proprietary information is being stored in cleartext.

B : occurs during the monthly vulnerability scanning.

C : uncovers indicators of prior compromise over the course of the assessment.

D : proceeds in parallel with a criminal digital forensic investigation

Answer: C

Question 2

A penetration tester writes the following script:

Which of the following objectives is the tester attempting to achieve?

A : Determine active hosts on the network.

B : Set the TTL of ping packets for stealth.

C : Fill the ARP table of the networked devices.

D : Scan the system on the most used ports.

Answer: A

Question 3

Which of the following would MOST likely be included in the final report of a static application-security test that was written with a team of application developers as the intended audience?

A : Executive summary of the penetration-testing methods used

B : Bill of materials including supplies, subcontracts, and costs incurred during assessment

C : Quantitative impact assessments given a successful software compromise

D : Code context for instances of unsafe type-casting operations

Answer: D

Question 4

You find yourself on a Linux box and issue the following commands. Which exploit would be most likely to work? ``` Target:$ uname -srv Linux 4.8.0-58-generic #63~16.04.1-Ubuntu SMP Mon Jun 26 18:08:51 UTC 2017 Kali:$ searchsploit Linux 4.8.0 Linux Kernel 4.8.0 UDEV < 232 - Local Privesc | linux/local/41886.c Linux Kernel 4.8.0-34 < 4.8.0-45 (Ubuntu / Linux Mint) | linux/local/47168.c Linux Kernel 4.8.0-41-generic (Ubuntu | linux/local/41994.c Linux Kernel < 4.4.0-83 / < 4.8.0-58 (Ubuntu 14.04/16.04)| linux/local/43418.c ```

A : 47168.c

B : 41886.c

C : 41994.c

D : 43418.c

Answer: D

Question 5

During an assessment, a penetration tester manages to exploit an LFI vulnerability and browse the web log for a target Apache server. Which of the following steps would the penetration tester most likely try NEXT to further exploit the web server? (Choose two.)

A : Cross-site scripting

B : Server-side request forgery

C : SQL injection

D : Log poisoning

E : Cross-site request forgery

F : Command injection

Answer: A,D

Name:	CompTIA PenTest+
Exam Code:	PT0-002
Certification:	CompTIA PenTest
Vendor:	CompTIA
Total Questions:	696
Last Updated:	Apr 25, 2024

Download Demo PT0-002 Dumps

Create Account

Password Recovery

PT0-002 Practice Online

Download Demo PT0-002 Dumps

Member Login

Create Account

Password Recovery

PT0-002 Practice Online