PT0-002 CompTIA Exam Questions and Free Practice Test

Question 19

A penetration tester completed a vulnerability scan against a web server and identified a single but severe vulnerability.
Which of the following is the BEST way to ensure this is a true positive?

A. Run another scanner to compare.

B. Perform a manual test on the server.

C. Check the results on the scanner.

D. Look for the vulnerability online.

Correct Answer:B

Question 20

A penetration tester has gained access to a network device that has a previously unknown IP range on an interface. Further research determines this is an always-on VPN tunnel to a third-party supplier.
Which of the following is the BEST action for the penetration tester to take?

A. Utilize the tunnel as a means of pivoting to other internal devices.

B. Disregard the IP range, as it is out of scope.

C. Stop the assessment and inform the emergency contact.

D. Scan the IP range for additional systems to exploit.

Correct Answer:D

Question 21

Which of the following expressions in Python increase a variableval by one (Choose two.)

A. val++

B. +val

C. val=(val+1)

D. ++val

E. val=val++

F. val+=1

Correct Answer:DF

Question 22

Which of the following are the MOST important items to include in the final report for a penetration test?
(Choose two.)

A. The CVSS score of the finding

B. The network location of the vulnerable device

C. The vulnerability identifier

D. The client acceptance form

E. The name of the person who found the flaw

F. The tool used to find the issue

Correct Answer:CF

Question 23

Which of the following should a penetration tester do NEXT after identifying that an application being tested has already been compromised with malware?

A. Analyze the malware to see what it does.

B. Collect the proper evidence and then remove the malware.

C. Do a root-cause analysis to find out how the malware got in.

D. Remove the malware immediately.

E. Stop the assessment and inform the emergency contact.

Correct Answer:E

Question 24

A penetration tester is explaining the MITRE ATT&CK framework to a company’s chief legal counsel. Which of the following would the tester MOST likely describe as a benefit of the framework?

A. Understanding the tactics of a security intrusion can help disrupt them.

B. Scripts that are part of the framework can be imported directly into SIEM tools.

C. The methodology can be used to estimate the cost of an incident better.

D. The framework is static and ensures stability of a security program overtime.

Correct Answer:A

START PT0-002 EXAM