PT0-002 CompTIA Exam Questions and Free Practice Test

Question 31

A penetration tester was brute forcing an internal web server and ran a command that produced the following output:
PT0-002 dumps exhibit
However, when the penetration tester tried to browse the URL http://172.16.100.10:3000/profile, a blank page was displayed.
Which of the following is the MOST likely reason for the lack of output?

A. The HTTP port is not open on the firewall.

B. The tester did not run sudo before the command.

C. The web server is using HTTPS instead of HTTP.

D. This URI returned a server error.

Correct Answer:A

Question 32

A penetration tester was conducting a penetration test and discovered the network traffic was no longer reaching the client’s IP address. The tester later discovered the SOC had used sinkholing on the penetration tester’s IP address. Which of the following BEST describes what happened?

A. The penetration tester was testing the wrong assets

B. The planning process failed to ensure all teams were notified

C. The client was not ready for the assessment to start

D. The penetration tester had incorrect contact information

Correct Answer:B

Question 33

Which of the following types of information should be included when writing the remediation section of a penetration test report to be viewed by the systems administrator and technical staff?

A. A quick description of the vulnerability and a high-level control to fix it

B. Information regarding the business impact if compromised

C. The executive summary and information regarding the testing company

D. The rules of engagement from the assessment

Correct Answer:B

Question 34

A penetration tester who is conducting a web-application test discovers a clickjacking vulnerability associated with a login page to financial data. Which of the following should the tester do with this information to make this a successful exploit?

A. Perform XSS.

B. Conduct a watering-hole attack.

C. Use BeEF.

D. Use browser autopwn.

Correct Answer:A

Question 35

A security company has been contracted to perform a scoped insider-threat assessment to try to gain access to the human resources server that houses PII and salary data. The penetration testers have been given an internal network starting position.
Which of the following actions, if performed, would be ethical within the scope of the assessment?

A. Exploiting a configuration weakness in the SQL database

B. Intercepting outbound TLS traffic

C. Gaining access to hosts by injecting malware into the enterprise-wide update server

D. Leveraging a vulnerability on the internal CA to issue fraudulent client certificates

E. Establishing and maintaining persistence on the domain controller

Correct Answer:B

Question 36

During a penetration-testing engagement, a consultant performs reconnaissance of a client to identify potential targets for a phishing campaign. Which of the following would allow the consultant to retrieve email addresses for technical and billing contacts quickly, without triggering any of the client’s cybersecurity tools? (Choose two.)

A. Scraping social media sites

B. Using the WHOIS lookup tool

C. Crawling the client’s website

D. Phishing company employees

E. Utilizing DNS lookup tools

F. Conducting wardriving near the client facility

Correct Answer:BC

START PT0-002 EXAM