nerdexam
CompTIACompTIA

PT0-002 · Question #156

PT0-002 Question #156: Real Exam Question with Answer & Explanation

Sign in or unlock PT0-002 to reveal the answer and full explanation for question #156. The question stem and answer options stay visible for context.

Attacks and Exploits

Question

A security company has been contracted to perform a scoped insider-threat assessment to try to gain access to the human resources server that houses PII and salary data. The penetration testers have been given an internal network starting position. Which of the following actions, if performed, would be ethical within the scope of the assessment?

Options

  • AExploiting a configuration weakness in the SQL database
  • BIntercepting outbound TLS traffic
  • CGaining access to hosts by injecting malware into the enterprise-wide update server
  • DLeveraging a vulnerability on the internal CA to issue fraudulent client certificates
  • EEstablishing and maintaining persistence on the domain controller

Unlock PT0-002 to see the answer

You've previewed enough free PT0-002 questions. Unlock PT0-002 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Penetration testing ethics#Scope management#Exploitation techniques#Insider threat assessment
Full PT0-002 PracticeBrowse All PT0-002 Questions