The Best Valid PT0-002 Dumps for Helping Passing PT0-002 Exam!
UPDATED CompTIA PT0-002 Exam Questions & Answer
NEW QUESTION # 114
A company obtained permission for a vulnerability scan from its cloud service provider and now wants to test the security of its hosted data.
Which of the following should the tester verify FIRST to assess this risk?
- A. Whether the connection between the cloud and the client is secure
- B. Whether the cloud applications were developed using a secure SDLC
- C. Whether sensitive client data is publicly accessible
- D. Whether the client's employees are trained properly to use the platform
Answer: C
NEW QUESTION # 115
A penetration tester is starting an assessment but only has publicly available information about the target company. The client is aware of this exercise and is preparing for the test.
Which of the following describes the scope of the assessment?
- A. Unknown environment testing
- B. Partially known environment testing
- C. Known environment testing
- D. Physical environment testing
Answer: A
NEW QUESTION # 116
An Nmap scan shows open ports on web servers and databases. A penetration tester decides to run WPScan and SQLmap to identify vulnerabilities and additional information about those systems.
Which of the following is the penetration tester trying to accomplish?
- A. Limit invasiveness based on scope.
- B. Maintain confidentiality of the findings.
- C. Identify all the vulnerabilities in the environment.
- D. Uncover potential criminal activity based on the evidence gathered.
Answer: A
NEW QUESTION # 117
A security firm is discussing the results of a penetration test with the client. Based on the findings, the client wants to focus the remaining time on a critical network segment. Which of the following BEST describes the action taking place?
- A. Maximizing the likelihood of finding vulnerabilities
- B. Eliminating the potential for false positives
- C. Reprioritizing the goals/objectives
- D. Reducing the risk to the client environment
Answer: A
NEW QUESTION # 118
A penetration tester has obtained root access to a Linux-based file server and would like to maintain persistence after reboot. Which of the following techniques would BEST support this objective?
- A. Create a one-shot system service to establish a reverse shell.
- B. Run the nc -e /bin/sh <...> command.
- C. Move laterally to create a user account on LDAP
- D. Obtain /etc/shadow and brute force the root password.
Answer: A
Explanation:
Explanation
https://hosakacorp.net/p/systemd-user.html
NEW QUESTION # 119
A penetration tester is reviewing the following SOW prior to engaging with a client:
"Network diagrams, logical and physical asset inventory, and employees' names are to be treated as client confidential. Upon completion of the engagement, the penetration tester will submit findings to the client's Chief Information Security Officer (CISO) via encrypted protocols and subsequently dispose of all findings by erasing them in a secure manner." Based on the information in the SOW, which of the following behaviors would be considered unethical? (Choose two.)
- A. Utilizing proprietary penetration-testing tools that are not available to the public or to the client for auditing and inspection
- B. Using a software-based erase tool to wipe the client's findings from the penetration tester's laptop
- C. Failing to share with the client critical vulnerabilities that exist within the client architecture to appease the client's senior leadership team
- D. Utilizing public-key cryptography to ensure findings are delivered to the CISO upon completion of the engagement
- E. Retaining the SOW within the penetration tester's company for future use so the sales team can plan future engagements
- F. Seeking help with the engagement in underground hacker forums by sharing the client's public IP address
Answer: C,F
NEW QUESTION # 120
An Nmap network scan has found five open ports with identified services. Which of the following tools should a penetration tester use NEXT to determine if any vulnerabilities with associated exploits exist on the open ports?
- A. OpenVAS
- B. OWASP ZAP
- C. Drozer
- D. Burp Suite
Answer: A
Explanation:
Explanation
OpenVAS is a full-featured vulnerability scanner.
OWASP ZAP = Burp Suite
Drozer (Android) = drozer allows you to search for security vulnerabilities in apps and devices by assuming the role of an app and interacting with the Dalvik VM, other apps' IPC endpoints and the underlying OS.
NEW QUESTION # 121
A penetration tester recently completed a review of the security of a core network device within a corporate environment. The key findings are as follows:
* The following request was intercepted going to the network device:
GET /login HTTP/1.1
Host: 10.50.100.16
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Firefox/31.0 Accept-Language: en-US,en;q=0.5 Connection: keep-alive Authorization: Basic WU9VUilOQU1FOnNlY3JldHBhc3N3b3jk
* Network management interfaces are available on the production network.
* An Nmap scan returned the following:
Which of the following would be BEST to add to the recommendations section of the final report? (Choose two.)
- A. Implement a better method for authentication.
- B. Enforce enhanced password complexity requirements.
- C. Create an out-of-band network for management.
- D. Disable HTTP/301 redirect configuration.
- E. Disable or upgrade SSH daemon.
- F. Eliminate network management and control interfaces.
Answer: C,D
NEW QUESTION # 122
A penetration tester exploited a unique flaw on a recent penetration test of a bank. After the test was completed, the tester posted information about the exploit online along with the IP addresses of the exploited machines. Which of the following documents could hold the penetration tester accountable for this action?
- A. NDA
- B. MSA
- C. SLA
- D. ROE
Answer: A
NEW QUESTION # 123
Which of the following are the MOST important items to include in the final report for a penetration test?
(Choose two.)
- A. The tool used to find the issue
- B. The CVSS score of the finding
- C. The name of the person who found the flaw
- D. The network location of the vulnerable device
- E. The client acceptance form
- F. The vulnerability identifier
Answer: A,F
NEW QUESTION # 124
A penetration tester who is doing a company-requested assessment would like to send traffic to another system using double tagging. Which of the following techniques would BEST accomplish this goal?
- A. Meta tagging
- B. RFID cloning
- C. Tag nesting
- D. RFID tagging
Answer: C
Explanation:
since vlan hopping requires 2 vlans to be nested in a single packet. Double tagging occurs when an attacker adds and modifies tags on an Ethernet frame to allow the sending of packets through any VLAN. This attack takes advantage of how many switches process tags. Most switches will only remove the outer tag and forward the frame to all native VLAN ports. With that said, this exploit is only successful if the attacker belongs to the native VLAN of the trunk link. https://cybersecurity.att.com/blogs/security-essentials/vlan-hopping-and-mitigation
NEW QUESTION # 125
A penetration tester needs to upload the results of a port scan to a centralized security tool. Which of the following commands would allow the tester to save the results in an interchangeable format?
- A. nmap 192.168.0.10-100 -O > results
- B. nmap 192.168.0.10-100 | grep "results"
- C. nmap -A 192.168.0.10-100 -oX results
- D. nmap -iL results 192.168.0.10-100
Answer: C
NEW QUESTION # 126
A new client hired a penetration-testing company for a month-long contract for various security assessments against the client's new service. The client is expecting to make the new service publicly available shortly after the assessment is complete and is planning to fix any findings, except for critical issues, after the service is made public. The client wants a simple report structure and does not want to receive daily findings.
Which of the following is most important for the penetration tester to define FIRST?
- A. Establish the threshold of risk to escalate to the client immediately.
- B. Establish the preferred day of the week for reporting.
- C. Establish the format required by the client.
- D. Establish the method of potential false positives.
Answer: A
NEW QUESTION # 127
A penetration tester conducted a vulnerability scan against a client's critical servers and found the following:
Which of the following would be a recommendation for remediation?
- A. Deploy a user training program
- B. Configure access controls on each of the servers
- C. Implement a patch management plan
- D. Utilize the secure software development life cycle
Answer: C
NEW QUESTION # 128
A penetration tester needs to perform a test on a finance system that is PCI DSS v3.2.1 compliant. Which of the following is the MINIMUM frequency to complete the scan of the system?
- A. Weekly
- B. Monthly
- C. Annually
- D. Quarterly
Answer: D
Explanation:
Explanation
https://www.pcicomplianceguide.org/faq/#25
PCI DSS requires quarterly vulnerability/penetration tests, not weekly.
NEW QUESTION # 129
A penetration tester gains access to a system and is able to migrate to a user process:
Given the output above, which of the following actions is the penetration tester performing? (Choose two.)
- A. Building a scheduled task for execution
- B. Setting up a reverse shell from a remote system
- C. Executing a file on the remote system
- D. Adding an additional IP address on the compromised system
- E. Redirecting output from a file to a remote system
- F. Creating a new process on all domain systems
- G. Mapping a share to a remote system
Answer: C,G
Explanation:
Explanation
WMIC.exe is a built-in Microsoft program that allows command-line access to the Windows Management Instrumentation. Using this tool, administrators can query the operating system for detailed information about installed hardware and Windows settings, run management tasks, and even execute other programs or commands.
NEW QUESTION # 130
......
Updated PT0-002 Dumps Questions For CompTIA Exam: https://www.validtorrent.com/PT0-002-valid-exam-torrent.html
Latest Success Metrics For Actual PT0-002 Exam Realistic Dumps: https://drive.google.com/open?id=1OiV9eA4ILU6UMnegNV1L8EpCLs7dJjUM