[Q251-Q266] Dumps for Free CompTIA PT0-002 Practice Exam Questions [Feb 20, 2025]

5/5 - (2 votes)

Dumps for Free CompTIA PT0-002 Practice Exam Questions [Feb 20, 2025]

PT0-002 Dumps PDF And Certification Training

NO.251 A penetration tester requested, without express authorization, that a CVE number be assigned for a new vulnerability found on an internal client application. Which of the following did the penetration tester most likely breach?

ROE

SLA

NDA

SOW

NO.252 A penetration tester has been contracted to review wireless security. The tester has deployed a malicious wireless AP that mimics the configuration of the target enterprise WiFi. The penetration tester now wants to try to force nearby wireless stations to connect to the malicious AP. Which of the following steps should the tester take NEXT?

Send deauthentication frames to the stations.

Perform jamming on all 2.4GHz and 5GHz channels.

Set the malicious AP to broadcast within dynamic frequency selection channels.

Modify the malicious AP configuration to not use a pre-shared key.

NO.253 A penetration tester wants to identify CVEs that can be leveraged to gain execution on a Linux server that has an SSHD running. Which of the following would BEST support this task?

Run nmap with the -o, -p22, and -sC options set against the target

Run nmap with the -sV and -p22 options set against the target

Run nmap with the –script vulners option set against the target

Run nmap with the -sA option set against the target

NO.254 A new security firm is onboarding its first client. The client only allowed testing over the weekend and needed the results Monday morning. However, the assessment team was not able to access the environment as expected until Monday. Which of the following should the security company have acquired BEFORE the start of the assessment?

A signed statement of work

The correct user accounts and associated passwords

The expected time frame of the assessment

The proper emergency contacts for the client

According to the CompTIA PenTest+ Study Guide, Exam PT0-0021, a statement of work (SOW) is a document that defines the scope, objectives, deliverables, and terms of a penetration testing project. It is a formal agreement between the service provider and the client that specifies what is expected from both parties, including the timeline, budget, resources, and responsibilities. A SOW is essential for any penetration testing engagement, as it helps to avoid misunderstandings, conflicts, and legal issues.
The CompTIA PenTest+ Study Guide also provides an example of a SOW template that covers the following sections1:
* Project overview: A brief summary of the project’s purpose, scope, objectives, and deliverables.
* Project scope: A detailed description of the target system, network, or application that will be tested, including the boundaries, exclusions, and assumptions.
* Project objectives: A clear statement of the expected outcomes and benefits of the project, such as
* identifying vulnerabilities, improving security posture, or complying with regulations.
* Project deliverables: A list of the tangible products or services that will be provided by the service provider to the client, such as reports, recommendations, or remediation plans.
* Project timeline: A schedule of the project’s milestones and deadlines, such as kickoff meeting, testing phase, reporting phase, or closure meeting.
* Project budget: A breakdown of the project’s costs and expenses, such as labor hours, travel expenses, tools, or licenses.
* Project resources: A specification of the project’s human and technical resources, such as team members, roles, responsibilities, skills, or equipment.
* Project terms and conditions: A statement of the project’s legal and contractual aspects, such as confidentiality, liability, warranty, or dispute resolution.
The CompTIA PenTest+ Study Guide also explains why having a SOW is important before starting an assessment1:
* It establishes a clear and mutual understanding of the project’s scope and expectations between the service provider and the client.
* It provides a basis for measuring the project’s progress and performance against the agreed-upon objectives and deliverables.
* It protects both parties from potential risks or disputes that may arise during or after the project.

NO.255 For a penetration test engagement, a security engineer decides to impersonate the IT help desk. The security engineer sends a phishing email containing an urgent request for users to change their passwords and a link to
https://example.com/index.html. The engineer has designed the attack so that once the users enter the credentials, the index.html page takes the credentials and then forwards them to another server that the security engineer is controlling. Given the following information:

Which of the following lines of code should the security engineer add to make the attack successful?

window.location.= ‘https://evilcorp.com’

crossDomain: true

geturlparameter (‘username’)

redirectUrl = ‘https://example.com’

NO.256 An exploit developer is coding a script that submits a very large number of small requests to a web server until the server is compromised. The script must examine each response received and compare the data to a large number of strings to determine which data to submit next. Which of the following data structures should the exploit developer use to make the string comparison and determination as efficient as possible?

A list

A tree

A dictionary

An array

NO.257 A penetration tester is working on a scoping document with a new client. The methodology the client uses includes the following:
* Pre-engagement interaction (scoping and ROE)
* Intelligence gathering (reconnaissance)
* Threat modeling
* Vulnerability analysis
* Exploitation and post exploitation
* Reporting
Which of the following methodologies does the client use?

OWASP Web Security Testing Guide

PTES technical guidelines

NIST SP 800-115

OSSTMM

NO.258 The results of an Nmap scan are as follows:
Starting Nmap 7.80 ( https://nmap.org ) at 2021-01-24 01:10 EST
Nmap scan report for ( 10.2.1.22 )
Host is up (0.0102s latency).
Not shown: 998 filtered ports
Port State Service
80/tcp open http
|_http-title: 80F 22% RH 1009.1MB (text/html)
|_http-slowloris-check:
| VULNERABLE:
| Slowloris DoS Attack
| <..>
Device type: bridge|general purpose
Running (JUST GUESSING) : QEMU (95%)
OS CPE: cpe:/a:qemu:qemu
No exact OS matches found for host (test conditions non-ideal).
OS detection performed. Please report any incorrect results at https://nmap.org/submit/.
Nmap done: 1 IP address (1 host up) scanned in 107.45 seconds
Which of the following device types will MOST likely have a similar response? (Choose two.)

Network device

Public-facing web server

Active Directory domain controller

IoT/embedded device

Exposed RDP

Print queue

NO.259 A penetration tester is performing reconnaissance for a web application assessment. Upon investigation, the tester reviews the robots.txt file for items of interest.
INSTRUCTIONS
Select the tool the penetration tester should use for further investigation.
Select the two entries in the robots.txt file that the penetration tester should recommend for removal.

NO.260 A penetration tester discovered that a client uses cloud mail as the company’s email system. During the penetration test, the tester set up a fake cloud mail login page and sent all company employees an email that stated their inboxes were full and directed them to the fake login page to remedy the issue. Which of the following BEST describes this attack?

Credential harvesting

Privilege escalation

Password spraying

Domain record abuse

NO.261 After compromising a system, a penetration tester wants more information in order to decide what actions to take next. The tester runs the following commands:

Which of the following attacks is the penetration tester most likely trying to perform?

Metadata service attack

Container escape techniques

Credential harvesting

Resource exhaustion

NO.262 A penetration tester executes the following Nmap command and obtains the following output:

Which of the following commands would best help the penetration tester discover an exploitable service?
A)

B)

C)

D)

nmap -v -p 25 — soript smtp-enum-users remotehost

nmap -v — script=mysql-info.nse remotehost

nmap –ocript=omb-brute.noe remotehoat

nmap -p 3306 — script “http*vuln*” remotehost

NO.263 You are a penetration tester reviewing a client’s website through a web browser.
INSTRUCTIONS
Review all components of the website through the browser to determine if vulnerabilities are present.
Remediate ONLY the highest vulnerability from either the certificate, source, or cookies.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

NO.264 During a penetration test, you gain access to a system with a limited user interface. This machine appears to have access to an isolated network that you would like to port scan.
INSTRUCTIONS
Analyze the code segments to determine which sections are needed to complete a port scanning script.
Drag the appropriate elements into the correct locations to complete the script.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

NO.265 A penetration tester writes the following script:

Which of the following is the tester performing?

Searching for service vulnerabilities

Trying to recover a lost bind shell

Building a reverse shell listening on specified ports

Scanning a network for specific open ports

NO.266 A penetration tester wants to find hidden information in documents available on the web at a particular domain. Which of the following should the penetration tester use?

Netcraft

CentralOps

Responder

FOCA

CompTIA PT0-002 exam contains a maximum of 85 questions, which are a combination of multiple-choice and performance-based questions. Candidates must score at least 750 out of 900 points to pass the exam. PT0-002 exam duration is 165 minutes, and registration fee is $359. PT0-002 exam can be taken at any Pearson VUE testing center worldwide, and it is available in English, Japanese, and Portuguese language.

CompTIA PT0-002, also known as the CompTIA PenTest+ Certification, is a vendor-neutral certification that validates the skills and knowledge of professionals who perform penetration testing and vulnerability management activities. PT0-002 exam focuses on assessing the candidate’s skills related to ethical hacking and identifying vulnerabilities in different networks and systems.

Check your preparation for CompTIA PT0-002 On-Demand Exam: https://www.actualpdf.com/PT0-002_exam-dumps.html

Leave a Reply Cancel reply