Free PT0-001: CompTIA PenTest Certification Exam Questions and Answers

Performance based You are a penetration Inter reviewing a client's website through a web browser. Instructions: Review all components of the website through the browser to determine if vulnerabilities are present. Remediate ONLY the highest vulnerability from either the certificate source or cookies.

Work out the matching from the exhibit, then reveal.

Correct answer: Step 1 = Remove certificate from server; Step 2 = Generate a Certificate Signing Request; Step 3 = Install re-issued certificate on the server; Step 4 = Submit CSR to the CA

The following command is run on a Linux file system: Chmod 4111 /usr/bin/sudo Which of the following issues may be exploited now?

• AA. Kernel vulnerabilities
• BB. Sticky bits
• CC. Unquoted service path
• DD. Misconfigured sudo

In which of the following components is an exploited vulnerability MOST likely to affect multiple running application containers at once?

• AA. Common libraries
• BB. Configuration files
• CC. Sandbox escape
• DD. ASLR bypass

Which of the following would be BEST for performing passive reconnaissance on a target's external domain?

• AA. Peach
• BB. CeWL
• CC. OpenVAS
• DD. Shodan

A penetration tester was able to retrieve the initial VPN user domain credentials by phishing a member of the IT department. Afterward, the penetration tester obtained hashes over the VPN and easily cracked them using a dictionary attack Which of the following remediation steps should be recommended? (Select THREE)

Select 3 answers.

• AA. Mandate all employees take security awareness training
• BB. Implement two-factor authentication for remote access
• CC. Install an intrusion prevention system
• DD. Increase password complexity requirements
• EE. Install a security information event monitoring solution.
• FF. Prevent members of the IT department from interactively logging in as administrators
• GG. Upgrade the cipher suite used for the VPN solution

A software development team recently migrated to new application software on the on-premises environment Penetration test findings show that multiple vulnerabilities exist If a penetration tester does not have access to a live or test environment, a test might be better to create the same environment on the VM Which of the following is MOST important for confirmation?

• AA. Unsecure service and protocol configuration
• BB. Running SMB and SMTP service
• CC. Weak password complexity and user account
• DD. Misconfiguration

A security analyst has uncovered a suspicious request in the logs for a web application. Given the following URL:

• AA. Directory traversal
• BB. Cross-site scripting
• CC. Remote file inclusion
• DD. User enumeration

After several attempts, an attacker was able to gain unauthorized access through a biometric sensor using the attacker's actual fingerprint without exploitation. Which of the following is the MOST likely explanation of what happened?

• AA. The biometric device is tuned more toward false positives
• BB. The biometric device is configured more toward true negatives
• CC. The biometric device is set to fail closed
• DD. The biometric device duplicated a valid user's fingerprint

Which of the following BEST explains why it is important to maintain confidentiality of any identified findings when performing a penetration test?

• AA. Penetration test findings often contain company intellectual property
• BB. Penetration test findings could lead to consumer dissatisfaction if made public
• CC. Penetration test findings are legal documents containing privileged information
• DD. Penetration test findings can assist an attacker in compromising a system

A penetration tester is required to perform OSINT on staff at a target company after completing the infrastructure aspect. Which of the following would be the BEST step for the penetration tester to take?

• AA. Obtain staff information by calling the company and using social engineering techniques.
• BB. Visit the client and use impersonation to obtain information from staff.
• CC. Send spoofed emails to staff to see if staff will respond with sensitive information.
• DD. Search the Internet for information on staff such as social networking sites