2023 Latest CompTIA PT0-001 Real Exam Dumps PDF [Q53-Q74]

2023 Latest CompTIA PT0-001 Real Exam Dumps PDF

PT0-001 Exam Dumps, PT0-001 Practice Test Questions

CompTIA PT0-001 certification exam, also known as the CompTIA PenTest+ Certification Exam, is designed to validate an individual’s skills and knowledge required for performing and managing penetration testing activities. PT0-001 exam aims to measure candidates’ abilities to perform reconnaissance, scanning, exploitation, post-exploitation activities, and reporting as well as effectively communicate with stakeholders. CompTIA PenTest+ Certification Exam certification evaluates how well a candidate is well-versed in the concepts of threat management, vulnerability assessment, and penetration testing.

NEW QUESTION # 53
A penetration tester identifies the following findings during an external vulnerability scan:

Which of the following attack strategies should be prioritized from the scan results above?

A. Web server configurations may reveal sensitive information
B. Weak password management practices may be employed
C. Cryptographically weak protocols may be intercepted
D. Obsolete software may contain exploitable components

Answer: C

NEW QUESTION # 54
A manager calls upon a tester to assist with diagnosing an issue within the following Python script:
#!/usr/bin/python
s = "Administrator"
The tester suspects it is an issue with string slicing and manipulation Analyze the following code segment and drag and drop the correct output for each string manipulation to its corresponding code segment Options may be used once or not at all

Answer:

Explanation:

Explanation
Nsrt
Snma
Trat
Imda

NEW QUESTION # 55
Which of Ihe following commands would allow a penetration tester to access a private network from the Internet in Metasploit?

A. use auxiliary/servet/aocka^a
B. db_nmap -iL /tmp/privatehoots . txt
C. run autoroute -a 192.168.1.0/24
D. set rhost 192.168.1.10

Answer: C

NEW QUESTION # 56
After gaining initial low-privilege access to a Linux system, a penetration tester identifies an interesting binary in a user's home folder titled ''changepass."
-sr-xr-x 1 root root 6443 Oct 18 2017 /home/user/changepass
Using "strings" to print ASCII printable characters from changepass, the tester notes the following:
$ strings changepass
exit
setuid
strcmp
GLIBC_2.0
ENV_PATH
% s/changepw
malloc
strlen
Given this information, which of the following is the MOST likely path of exploitation to achieve root privileges on the machine?

A. Create a copy of changepass in the same directory, naming it changepw. Export the ENV_PATH environmental variable to the path '/home/user/'. Then run changepass.
B. Run changepass within the current directory with sudo after exporting the ENV_PATH environmental variable to the path of '/usr/local/bin'.
C. Export the ENV_PATH environmental variable to the path of a writable directory that contains a token- stealing binary titled changepw. Then run changepass.
D. Copy changepass to a writable directory and export the ENV_PATH environmental variable to the path of a token-stealing binary titled changepw. Then run changepass.

Answer: B

NEW QUESTION # 57
In which of the following components is an exploited vulnerability MOST likely to affect multiple running application containers at once?

A. ASLR bypass
B. Configuration files
C. Common libraries
D. Sandbox escape

Answer: C

NEW QUESTION # 58
A penetration tester delivers a web application vulnerability scan report to a client. The penetration tester rates a vulnerability as medium severity. The same vulnerability was reported as a critical severity finding on the previous report. Which of the following is the MOST likely reason for the reduced severity?

A. The client has updated their codebase with new features.
B. The client has applied a hot fix without updating the version.
C. Thera are currently no known exploits for this vulnerability.
D. The threat landscape has significantly changed.

Answer: B

NEW QUESTION # 59
Which of the following documents BEST describes the manner in which a security assessment will be conducted?

A. MSA
B. SOW
C. BIA
D. SLA

Answer: C

NEW QUESTION # 60
A penetration tester is preparing to conduct API testing. Which of the following would be MOST helpful in preparing for this engagement?

A. W3AF
B. Swagger
C. WAR
D. Nikto

Answer: B

Explanation:
Explanation/Reference: https://blog.securelayer7.net/api-penetration-testing-with-owasp-2017-test-cases/

NEW QUESTION # 61
Which of the following CPU register does the penetration tester need to overwrite in order to exploit a simple butter overflow?

A. Stack base pointer
B. Stack pointer register
C. Index pointer register
D. Destination index register

Answer: D

NEW QUESTION # 62
A vulnerability scan identifies that an SSL certificate does not match the hostname; however, the client disputes the finding. Which of the following techniques can the penetration tester perform to adjudicate the validity of the findings?

A. Ensure the scanner is configured to perform ARP resolution.
B. Ensure the scanner is configured to analyze IP hosts.
C. Ensure the scanner has the proper plug -ins loaded.
D. Ensure the scanner can make outbound DNS requests.

Answer: D

NEW QUESTION # 63
Which of the following types of intrusion techniques is the use of an "under-the-door tool" during a physical security assessment an example of?

A. Egress sensor triggering
B. Lock bypass
C. Lock bumping
D. Lockpicking

Answer: B

Explanation:
Reference:
https://www.triaxiomsecurity.com/2018/08/16/physical-penetration-test-examples/

NEW QUESTION # 64
A software developer wants to test the code of an application for vulnerabilities. Which of the following processes should the software developer perform?

A. Dynamic scan
B. Compliance scan
C. Vulnerability scan
D. Static scan

Answer: C

NEW QUESTION # 65
Black box penetration testing strategy provides the tester with:

A. privileged credentials
B. a target list
C. a network diagram
D. source code

Answer: B

NEW QUESTION # 66
A penetration tester is performing a validation scan after an organization remediated a vulnerability on port 443 The penetration tester observes the following output:

Which of the following has MOST likely occurred?

A. The organization moved services to port 8443
B. The scan results were a false positive.
C. A mismatched firewall rule is blocking 443.
D. The IPS is blocking traffic to port 443

Answer: A

NEW QUESTION # 67
After performing a security assessment for a firm, the client was found to have been billed for the time the client's test environment was unavailable. The client claims to have been billed unfairly. Which of the following documents would MOST likely be able to provide guidance in such a situation?

A. NDA
B. BPA
C. SOW
D. EULA

Answer: B

NEW QUESTION # 68
Click the exhibit button.

Given the Nikto vulnerability, scan output shown in the exhibit, which of the following exploitation techniques might be used to exploit the target system? (Choose two.)

A. Cross-site request forgery
B. SQL injection
C. Login credential brute-forcing
D. Session hijacking
E. Arbitrary code execution

Answer: C,D

NEW QUESTION # 69
During a vulnerability assessment, the security consultant finds an XP legacy system that is running a criticalmbusiness function.
Which of the following mitigations is BEST for the consultant to conduct?

A. Segment the machine from the main network.
B. Update to the latest Microsoft Windows OS.
C. Put the machine behind the WAF.
D. Disconnect the machine.

Answer: C

NEW QUESTION # 70
For which of the following reasons does a penetration tester need to have a customer's point-of-contact information available at all times? (Choose three.)

A. To report findings that cannot be exploited
B. To report critical findings
C. To update the statement of work
D. To report a cracked password
E. To report a server that becomes unresponsive
F. To update payment information
G. To report the latest published exploits
H. To report indicators of compromise

Answer: B,E,H

NEW QUESTION # 71
A penetration tester observes that the content security policy header is missing during a web application penetration test. Which of the following techniques would the penetration tester MOST likely perform?

A. Command injection attack
B. Directory traversal attack
C. Clickjacking attack
D. Remote file inclusion attack

Answer: B

Explanation:
References:
https://geekflare.com/http-header-implementation/

NEW QUESTION # 72
Black box penetration testing strategy provides the tester with:

A. privileged credentials
B. a target list
C. a network diagram
D. source code

Answer: B

Explanation:
Explanation
References: https://www.scnsoft.com/blog/fifty-shades-of-penetration-testing

NEW QUESTION # 73
Place each of the following passwords in order of complexity from least complex (1) to most complex (4), based on the character sets represented Each password may be used only once