Pass Your PT0-002 Dumps as PDF Updated on 2024 With 400 Questions [Q153-Q173]

QUESTION 153
Penetration-testing activities have concluded, and the initial findings have been reviewed with the client.
Which of the following best describes the NEXT step in the engagement?

QUESTION 154
A penetration tester has gained access to the Chief Executive Officer’s (CEO’s) internal, corporate email. The next objective is to gain access to the network.
Which of the following methods will MOST likely work?

QUESTION 155
The provision that defines the level of responsibility between the penetration tester and the client for preventing unauthorized disclosure is found in the:

QUESTION 156
Running a vulnerability scanner on a hybrid network segment that includes general IT servers and industrial control systems:

QUESTION 157
A penetration tester managed to exploit a vulnerability using the following payload:
IF (1=1) WAIT FOR DELAY ‘0:0:15’
Which of the following actions would best mitigate this type ol attack?

QUESTION 158
During a penetration tester found a web component with no authentication requirements. The web component also allows file uploads and is hosted on one of the target public web the following actions should the penetration tester perform next?

QUESTION 159
Performing a penetration test against an environment with SCADA devices brings additional safety risk because the:

QUESTION 160
A new security firm is onboarding its first client. The client only allowed testing over the weekend and needed the results Monday morning. However, the assessment team was not able to access the environment as expected until Monday. Which of the following should the security company have acquired BEFORE the start of the assessment?

QUESTION 161
Given the following code:

Which of the following data structures is systems?

QUESTION 162
A consultant is reviewing the following output after reports of intermittent connectivity issues:
? (192.168.1.1) at 0a:d1:fa:b1:01:67 on en0 ifscope [ethernet]
? (192.168.1.12) at 34:a4:be:09:44:f4 on en0 ifscope [ethernet]
? (192.168.1.17) at 92:60:29:12:ac:d2 on en0 ifscope [ethernet]
? (192.168.1.34) at 88:de:a9:12:ce:fb on en0 ifscope [ethernet]
? (192.168.1.136) at 0a:d1:fa:b1:01:67 on en0 ifscope [ethernet]
? (192.168.1.255) at ff:ff:ff:ff:ff:ff on en0 ifscope [ethernet]
? (224.0.0.251) at 01:02:5e:7f:ff:fa on en0 ifscope permanent [ethernet]
? (239.255.255.250) at ff:ff:ff:ff:ff:ff on en0 ifscope permanent [ethernet] Which of the following is MOST likely to be reported by the consultant?

QUESTION 163
A penetration tester gains access to a system and is able to migrate to a user process:

Given the output above, which of the following actions is the penetration tester performing? (Choose two.)

QUESTION 164
During an assessment, a penetration tester emailed the following Python script to CompTIA’s employees:
import pyHook, sys, logging, pythoncom, datetime
log_file=’C:\Windows\Temp\log_comptia.txt’ def KbrdEvent(event):
logging.basicConfig(filename=log_file,level=logging.DEBUG, format=’%(messages)s’) chr(event.Ascii) logging.log(10, chr(event.Ascii)) return True hooks_manager = pyHook.HookManager() hooks_manager.KeyDown = KbrdEvent hooks_manager.HookKeyboard() pythoncom.PumpMessages() Which of the following is the intended effect of this script?

QUESTION 165
During a code review assessment, a penetration tester finds the following vulnerable code inside one of the web application files:
<% String id = request.getParameter(“id”); %>
Employee ID: <%= id %>
Which of the following is the best remediation to prevent a vulnerability from being exploited, based on this code?

QUESTION 166
After gaining access to a previous system, a penetration tester runs an Nmap scan against a network with the following results:

The tester then runs the following command from the previous exploited system, which fails:
Which of the following explains the reason why the command failed?

QUESTION 167
A company developed a new web application to allow its customers to submit loan applications. A penetration tester is reviewing the application and discovers that the application was developed in ASP and used MSSQL for its back-end database. Using the application’s search form, the penetration tester inputs the following code in the search input field:
IMG SRC=vbscript:msgbox (“Vulnerable_to_Attack”) ; >originalAttribute=”SRC”originalPath=”vbscript;msgbox (“Vulnerable_to_Attack “) ;>”
When the tester checks the submit button on the search form, the web browser returns a pop-up windows that displays “Vulnerable_to_Attack.” Which of the following vulnerabilities did the tester discover in the web application?

QUESTION 168
During an engagement, a penetration tester was able to upload to a server a PHP file with the following content:
<? php system ($_POST[‘cmd’]) ?>
Which of the following commands should the penetration tester run to successfully achieve RCE?

QUESTION 169
During enumeration, a red team discovered that an external web server was frequented by employees. After compromising the server, which of the following attacks would best support ————company systems?

QUESTION 170
In the process of active service enumeration, a penetration tester identifies an SMTP daemon running on one of the target company’s servers. Which of the following actions would BEST enable the tester to perform phishing in a later stage of the assessment?

QUESTION 171
While performing the scanning phase of a penetration test, the penetration tester runs the following command:
……..v -sV -p- 10.10.10.23-28
….ip scan is finished, the penetration tester notices all hosts seem to be down. Which of the following options should the penetration tester try next?

QUESTION 172
A penetration tester downloaded a Java application file from a compromised web server and identifies how to invoke it by looking at the following log:

Which of the following is the order of steps the penetration tester needs to follow to validate whether the Java application uses encryption over sockets?

QUESTION 173
A penetration tester runs the following command:
l.comptia.local axfr comptia.local
which of the following types of information would be provided?