[Oct-2024] CompTIA PenTest+ PT0-002 Exam Practice Test Questions Dumps Bundle!
2024 Updated PT0-002 PDF for the PT0-002 Tests Free Updated Today!
Why do I need to take the CompTIA PT0-002 Certification Exam?
Nowadays, many companies are using the CompTIA PT0-002 Certification Exam to evaluate the skills of the candidates. They are also looking for qualified candidates to work for them. The CompTIA PT0-002 Certification Exam is very useful for candidates who want to work for companies. It will help them to get a good job. CompTIA PT0-002 Certification Exam is a must for candidates who are working in the IT industry. PT0-002 Dumps will help you to pass the exam easily. CompTIA PT0-002 Certification Exam is designed by the CompTIA. The CompTIA is a renowned organization in the IT industry. They are providing training and certification to the candidates who are working in the IT industry. The CompTIA PT0-002 Certification Exam is very helpful for candidates who want to work in the IT industry.
How much is the salary of a CompTIA PT0-002 certified professional?
The salary of the CompTIA PT0-002 certified professional is dependent on the experience of the candidate, the type of organization they work for, the skills and qualifications they have, the company, location, and the certification. The average salary of a CompTIA PT0-002 certified professional who prepared himself with the help of the PT0-002 Dumps is as follows:
- In Canada: 50,000 CAD
- In India: 40,000 INR
- In the United States: 65,000 USD
- In Australia: 55,000 AUD
- In the United Kingdom: 59,000 GBP
NEW QUESTION # 110
Given the following Nmap scan command:
[root@kali ~]# nmap 192.168.0 .* -- exclude 192.168.0.101
Which of the following is the total number of servers that Nmap will attempt to scan?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
Explanation:
The Nmap scan command given will scan all the hosts in the 192.168.0.0/24 subnet, except for the one with the IP address 192.168.0.101. The subnet has 256 possible hosts, but one of them is excluded, so the total number of servers that Nmap will attempt to scan is 255. References:
* Nmap Commands - 17 Basic Commands for Linux Network, Section: Scan Multiple Hosts, Subsection:
Excluding Hosts from Search
* Nmap Cheat Sheet 2023: All the Commands and More, Section: Target Specification, Subsection:
-exclude
NEW QUESTION # 111
A company developed a new web application to allow its customers to submit loan applications. A penetration tester is reviewing the application and discovers that the application was developed in ASP and used MSSQL for its back-end database. Using the application's search form, the penetration tester inputs the following code in the search input field:
IMG SRC=vbscript:msgbox ("Vulnerable_to_Attack") ;
>originalAttribute="SRC"originalPath="vbscript;msgbox ("Vulnerable_to_Attack ") ;>" When the tester checks the submit button on the search form, the web browser returns a pop-up windows that displays "Vulnerable_to_Attack." Which of the following vulnerabilities did the tester discover in the web application?
- A. SQL injection
- B. Cross-site request forgery
- C. Command injection
- D. Cross-site scripting
Answer: D
NEW QUESTION # 112
You are a security analyst tasked with hardening a web server.
You have been given a list of HTTP payloads that were flagged as malicious.
INSTRUCTIONS
Given the following attack signatures, determine the attack type, and then identify the associated remediation to prevent the attack in the future.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Answer:
Explanation:
NEW QUESTION # 113
A penetration testing firm wants to hire three additional consultants to support a newly signed long-term contract with a major customer. The following is a summary of candidate background checks:
Which of the following candidates should most likely be excluded from consideration?
- A. Candidate 4
- B. Candidate 1
- C. Candidate 3
- D. Candidate 2
Answer: D
Explanation:
In the context of penetration testing or cybersecurity, hiring a consultant with a background in unauthorized system access could present both risks and benefits. From a risk management perspective, Candidate 2's history of unauthorized system access is a significant red flag. Such past behavior indicates a willingness to operate outside of legal and ethical boundaries, which could pose a risk to the firm and its clients, especially in a role that requires trust and adherence to legal guidelines.
However, the very skills that enabled unauthorized access might also provide the firm with deep insights into hacker methodologies, potentially enhancing the firm's capability to secure systems against such intrusions. It is a common practice in the cybersecurity industry to employ individuals with a history of hacking in roles where they can contribute positively, known as "ethical hacking" or "white hat" roles.
Nonetheless, given the legal and ethical responsibilities inherent in cybersecurity work, Candidate 2's past criminal charge of unauthorized system access is the most pertinent to the role and poses the most direct risk to the firm's operations and reputation. It would be crucial for the firm to conduct a thorough risk assessment, including the nature of the unauthorized access, the candidate's subsequent actions, rehabilitation, and current capabilities, before making a hiring decision.
From the provided information, it appears that Candidate 2 should most likely be excluded from consideration due to the direct relevance of their criminal charges to the position in question. Without evidence of rehabilitation and a clear demonstration of ethical standards, the liability risks might outweigh the potential benefits to the firm.
NEW QUESTION # 114
A penetration tester recently completed a review of the security of a core network device within a corporate environment. The key findings are as follows:
* The following request was intercepted going to the network device:
GET /login HTTP/1.1
Host: 10.50.100.16
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Firefox/31.0 Accept-Language: en-US,en;q=0.5 Connection: keep-alive Authorization: Basic WU9VUilOQU1FOnNlY3JldHBhc3N3b3jk
* Network management interfaces are available on the production network.
* An Nmap scan returned the following:
Which of the following would be BEST to add to the recommendations section of the final report? (Choose two.)
- A. Enforce enhanced password complexity requirements.
- B. Disable or upgrade SSH daemon.
- C. Implement a better method for authentication.
- D. Eliminate network management and control interfaces.
- E. Create an out-of-band network for management.
- F. Disable HTTP/301 redirect configuration.
Answer: C,F
NEW QUESTION # 115
The following line-numbered Python code snippet is being used in reconnaissance:
Which of the following line numbers from the script MOST likely contributed to the script triggering a "probable port scan" alert in the organization's IDS?
- A. Line 08
- B. Line 02
- C. Line 07
- D. Line 01
Answer: A
NEW QUESTION # 116
A penetration tester who is doing a company-requested assessment would like to send traffic to another system using double tagging. Which of the following techniques would BEST accomplish this goal?
- A. RFID cloning
- B. RFID tagging
- C. Tag nesting
- D. Meta tagging
Answer: C
Explanation:
Explanation
since vlan hopping requires 2 vlans to be nested in a single packet. Double tagging occurs when an attacker adds and modifies tags on an Ethernet frame to allow the sending of packets through any VLAN. This attack takes advantage of how many switches process tags. Most switches will only remove the outer tag and forward the frame to all native VLAN ports. With that said, this exploit is only successful if the attacker belongs to the native VLAN of the trunk link.
https://cybersecurity.att.com/blogs/security-essentials/vlan-hopping-and-mitigation
NEW QUESTION # 117
After gaining access to a Linux system with a non-privileged account, a penetration tester identifies the following file:
Which of the following actions should the tester perform FIRST?
- A. Use privilege escalation.
- B. Change the file permissions.
- C. Cover tracks.
- D. Start a reverse shell.
Answer: A
Explanation:
The file .scripts/daily_log_backup.sh has permissions set to 777, meaning that anyone can read, write, or execute the file. Since it's owned by the root user and the penetration tester has access to the system with a non-privileged account, this could be a potential avenue for privilege escalation. In a penetration test, after finding such a file, the tester would likely want to explore it and see if it can be leveraged to gain higher privileges. This is often done by inserting malicious code or commands into the script if it's being executed with higher privileges, such as root in this case.
NEW QUESTION # 118
Which of the following tools would be BEST suited to perform a manual web application security assessment? (Choose two.)
- A. BeEF
- B. Nessus
- C. OWASP ZAP
- D. Nmap
- E. Hydra
- F. Burp Suite
Answer: C,F
NEW QUESTION # 119
A penetration tester discovered that a client uses cloud mail as the company's email system. During the penetration test, the tester set up a fake cloud mail login page and sent all company employees an email that stated their inboxes were full and directed them to the fake login page to remedy the issue. Which of the following BEST describes this attack?
- A. Password spraying
- B. Domain record abuse
- C. Privilege escalation
- D. Credential harvesting
Answer: D
NEW QUESTION # 120
You are a penetration tester running port scans on a server.
INSTRUCTIONS
Part 1: Given the output, construct the command that was used to generate this output from the available options.
Part 2: Once the command is appropriately constructed, use the given output to identify the potential attack vectors that should be investigated further.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
- A. See explanation below
Answer: A
Explanation:
Part 1 - 192.168.2.2 -O -sV --top-ports=100 and SMB vulns
Part 2 - Weak SMB file permissions
https://subscription.packtpub.com/book/networking-and-servers/9781786467454/1/ch01lvl1sec13/fingerprinting-os-and-services-running-on-a-target-host
NEW QUESTION # 121
A penetration tester writes the following script:
Which of the following is the tester performing?
- A. Scanning a network for specific open ports
- B. Trying to recover a lost bind shell
- C. Building a reverse shell listening on specified ports
- D. Searching for service vulnerabilities
Answer: A
Explanation:
-z zero-I/O mode [used for scanning]
-v verbose
example output of script:
10.0.0.1: inverse host lookup failed: Unknown host
(UNKNOWN) [10.0.0.1] 22 (ssh) open
(UNKNOWN) [10.0.0.1] 23 (telnet) : Connection timed out
https://unix.stackexchange.com/questions/589561/what-is-nc-z-used-for
NEW QUESTION # 122
A consultant is reviewing the following output after reports of intermittent connectivity issues:
? (192.168.1.1) at 0a:d1:fa:b1:01:67 on en0 ifscope [ethernet]
? (192.168.1.12) at 34:a4:be:09:44:f4 on en0 ifscope [ethernet]
? (192.168.1.17) at 92:60:29:12:ac:d2 on en0 ifscope [ethernet]
? (192.168.1.34) at 88:de:a9:12:ce:fb on en0 ifscope [ethernet]
? (192.168.1.136) at 0a:d1:fa:b1:01:67 on en0 ifscope [ethernet]
? (192.168.1.255) at ff:ff:ff:ff:ff:ff on en0 ifscope [ethernet]
? (224.0.0.251) at 01:02:5e:7f:ff:fa on en0 ifscope permanent [ethernet]
? (239.255.255.250) at ff:ff:ff:ff:ff:ff on en0 ifscope permanent [ethernet]
Which of the following is MOST likely to be reported by the consultant?
- A. A device on the network has poisoned the ARP cache.
- B. An ARP flooding attack is using the broadcast address to perform DDoS.
- C. A multicast session was initiated using the wrong multicast group.
- D. A device on the network has an IP address in the wrong subnet.
Answer: A
Explanation:
The gateway for the network (192.168.1.1) is at 0a:d1:fa:b1:01:67, and then, another machine (192.168.1.136) also claims to be on the same MAC address. With this on the same network, intermittent connectivity will be inevitable as along as the gateway remains unreachable on the IP known by the others machines on the network, and given that the new machine claiming to be the gateway has not been configured to route traffic.
NEW QUESTION # 123
You are a security analyst tasked with hardening a web server.
You have been given a list of HTTP payloads that were flagged as malicious.
INSTRUCTIONS
Given the following attack signatures, determine the attack type, and then identify the associated remediation to prevent the attack in the future.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Answer:
Explanation:
NEW QUESTION # 124
A penetration tester wrote the following Bash script to brute force a local service password:
..ting as expected. Which of the following changes should the penetration tester make to get the script to work?
- A. .e
cho "The correct password is $p" && break)
o "The correct password is $p" I break - B. e
cho "The correct password is Sp" && break)
echo "The correct password is $p" && break) - C. ..e
cho "The correct password is $p" && break)
ho "The correct password is $p" I| break - D. .
{ echo "The correct password is $p" && break )
With
Answer: A
Explanation:
I| ( echo "The correct password is $p" && break )
Explanation:
CeWL is a tool that can be used to crawl a website and build a wordlist using the data recovered to crack the password on the website. CeWL stands for Custom Word List generator, and it is a Ruby script that spiders a given website up to a specified depth and returns a list of words that can be used for password cracking or other purposes. CeWL can also generate wordlists based on metadata, email addresses, author names, or external links found on the website. CeWL can help a penetration tester create customized wordlists that are tailored to the target website and increase the chances of success for password cracking attacks. DirBuster is a tool that can be used to brute force directories and files names on web servers. w3af is a tool that can be used to scan web applications for vulnerabilities and exploits. Patator is a tool that can be used to perform brute force attacks against various protocols and services.
NEW QUESTION # 125
......
If you're someone interested in pursuing a career in the field of cybersecurity, one of the certifications that you should consider getting is the CompTIA PT0-002 (CompTIA PenTest+) Certification Exam. PT0-002 examination is designed to measure your knowledge and understanding of penetration testing, and whether or not you have the skills necessary to perform them in a safe, ethical, and effective manner.
Fully Updated Dumps PDF - Latest PT0-002 Exam Questions and Answers: https://www.actual4exams.com/PT0-002-valid-dump.html
100% Free PT0-002 Exam Dumps to Pass Exam Easily: https://drive.google.com/open?id=1hYYC6Yam9JosvHNAGVD0vxw7Bd2s1Jpd