Free CompTIA PT0-002 Exam Questions & Answer from Training Expert ActualVCE [Q79-Q96]

Free CompTIA PT0-002 Exam Questions and Answer from Training Expert ActualVCE

Top CompTIA PT0-002 Courses Online

NEW QUESTION 79
You are a penetration tester running port scans on a server.
INSTRUCTIONS
Part 1: Given the output, construct the command that was used to generate this output from the available options.
Part 2: Once the command is appropriately constructed, use the given output to identify the potential attack vectors that should be investigated further.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Answer:

Explanation:
Part 1 - nmap 192.168.2.2 -sV -O
Part 2 - Weak SMB file permissions

NEW QUESTION 80
During a penetration test, a tester is in close proximity to a corporate mobile device belonging to a network administrator that is broadcasting Bluetooth frames.
Which of the following is an example of a Bluesnarfing attack that the penetration tester can perform?

A. Transmit text messages to the device.
B. Break a connection between two Bluetooth devices.
C. Dump the user address book on the device.
D. Sniff and then crack the WPS PIN on an associated WiFi device.

Answer: C

Explanation:
Bluesnarfing is the unauthorized access of information from a wireless device through a Bluetooth connection, often between phones, desktops, laptops, and PDAs. This allows access to calendars, contact lists, emails and text messages, and on some phones, users can copy pictures and private videos.

NEW QUESTION 81
A penetration tester has identified several newly released CVEs on a VoIP call manager. The scanning tool the tester used determined the possible presence of the CVEs based off the version number of the service. Which of the following methods would BEST support validation of the possible findings?

A. Utilize an nmap -sV scan against the service
B. Review SIP traffic from an on-path position to look for indicators of compromise
C. Test with proof-of-concept code from an exploit database
D. Manually check the version number of the VoIP service against the CVE release

Answer: C

NEW QUESTION 82
A penetration tester wants to test a list of common passwords against the SSH daemon on a network device. Which of the following tools would be BEST to use for this purpose?

A. Patator
B. Mimikatz
C. Hashcat
D. John the Ripper

Answer: A

Explanation:
https://www.kali.org/tools/patator/

NEW QUESTION 83
A penetration tester conducted a discovery scan that generated the following:

Which of the following commands generated the results above and will transform them into a list of active hosts for further analysis?

A. nmap -oG list.txt 192.168.0.1-254 , sort
B. nmap -o 192.168.0.1-254, cut -f 2
C. nmap -sn 192.168.0.1-254 , grep "Nmap scan" | awk '{print S5}'
D. nmap --open 192.168.0.1-254, uniq

Answer: B

NEW QUESTION 84
An assessor wants to run an Nmap scan as quietly as possible. Which of the following commands will give the LEAST chance of detection?

A. nmap - T0 192.168.0.1
B. nmap - "P0 192.168.0.1
C. nmap -"T3 192.168.0.1
D. nmap - A 192.168.0.1

Answer: A

NEW QUESTION 85
A penetration tester captured the following traffic during a web-application test:

Which of the following methods should the tester use to visualize the authorization information being transmitted?

A. Decrypt the authorization header using AES.
B. Decrypt the authorization header using bcrypt.
C. Decode the authorization header using UTF-8.
D. Decode the authorization header using Base64.

Answer: D

NEW QUESTION 86
A company has hired a penetration tester to deploy and set up a rogue access point on the network.
Which of the following is the BEST tool to use to accomplish this goal?

A. Kismet
B. Wifite
C. Wireshark
D. Aircrack-ng

Answer: D

NEW QUESTION 87
A penetration tester is exploring a client's website. The tester performs a curl command and obtains the following:
* Connected to 10.2.11.144 (::1) port 80 (#0)
> GET /readmine.html HTTP/1.1
> Host: 10.2.11.144
> User-Agent: curl/7.67.0
> Accept: */*
>
* Mark bundle as not supporting multiuse
< HTTP/1.1 200
< Date: Tue, 02 Feb 2021 21:46:47 GMT
< Server: Apache/2.4.41 (Debian)
< Content-Length: 317
< Content-Type: text/html; charset=iso-8859-1
<
<!DOCTYPE html>
<html lang="en">
<head>
<meta name="viewport" content="width=device-width" />
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>WordPress › ReadMe</title>
<link rel="stylesheet" href="wp-admin/css/install.css?ver=20100228" type="text/css" />
</head>
Which of the following tools would be BEST for the penetration tester to use to explore this site further?

A. OWASP ZAP
B. Burp Suite
C. WPScan
D. DirBuster

Answer: C

NEW QUESTION 88
A final penetration test report has been submitted to the board for review and accepted. The report has three findings rated high. Which of the following should be the NEXT step?

A. Provide the list of common vulnerabilities and exposures.
B. Perform a new penetration test.
C. Remediate the findings.
D. Broaden the scope of the penetration test.

Answer: C

NEW QUESTION 89
A large client wants a penetration tester to scan for devices within its network that are Internet facing. The client is specifically looking for Cisco devices with no authentication requirements. Which of the following settings in Shodan would meet the client's requirements?

A. "cisco-ios" "admin+1234"
B. "cisco-ios" "no-password"
C. "cisco-ios" "default-passwords"
D. "cisco-ios" "last-modified"

Answer: A

NEW QUESTION 90
Which of the following is a rules engine for managing public cloud accounts and resources?

A. Cloud Custodian
B. Cloud Brute
C. Pacu
D. Scout Suite

Answer: A

Explanation:
Cloud Custodian is a rules engine for managing public cloud accounts and resources. It allows users to define policies to enable a well managed cloud infrastructure, that's both secure and cost optimized. It consolidates many of the adhoc scripts organizations have into a lightweight and flexible tool, with unified metrics and reporting.

NEW QUESTION 91
A client wants a security assessment company to perform a penetration test against its hot site. The purpose of the test is to determine the effectiveness of the defenses that protect against disruptions to business continuity. Which of the following is the MOST important action to take before starting this type of assessment?

A. Ensure the client has signed the SOW.
B. Determine if the failover environment relies on resources not owned by the client.
C. Establish communication and escalation procedures with the client.
D. Verify the client has granted network access to the hot site.

Answer: B

NEW QUESTION 92
Which of the following tools provides Python classes for interacting with network protocols?

A. Impacket
B. Responder
C. Empire
D. PowerSploit

Answer: A

NEW QUESTION 93
Which of the following assessment methods is MOST likely to cause harm to an ICS environment?

A. Ping sweep
B. Active scanning
C. Packet analysis
D. Protocol reversing

Answer: B

NEW QUESTION 94
During a penetration-testing engagement, a consultant performs reconnaissance of a client to identify potential targets for a phishing campaign. Which of the following would allow the consultant to retrieve email addresses for technical and billing contacts quickly, without triggering any of the client's cybersecurity tools? (Choose two.)

A. Scraping social media sites
B. Using the WHOIS lookup tool
C. Phishing company employees
D. Conducting wardriving near the client facility
E. Crawling the client's website
F. Utilizing DNS lookup tools

Answer: B,E

NEW QUESTION 95
You are a penetration tester reviewing a client's website through a web browser.
INSTRUCTIONS
Review all components of the website through the browser to determine if vulnerabilities are present.
Remediate ONLY the highest vulnerability from either the certificate, source, or cookies.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.