PT0-002 Exam Questions

Which of the following actions would BEST explain why a testing team would need to reach out to a customer's emergency contact during an assessment?

An executive needs to use Wi-Fi to connect to the company's server while traveling. Looking for available Wi-Fi connections, the executive notices an available access point to a ho...

A penetration tester calls an IT employee and pretends to be the financial director of the company. The penetration tester asks the IT employee to reset the financial director's em...

A penetration tester runs the following command: dig @ dns01.comptia.local axfr comptia.local If successful, which of the following types of information would be provided?

A company recruited a penetration tester to configure intrusion detection over the wireless network. Which of the following tools would BEST resolve this issue?

While performing an assessment on a web application, a penetration tester notices the web browser creates the following request when clicking on the stock status for an item: POST...

following output: Which of the following is the MOST probable cause for this output?

Which of the following is the MOST secure method for sending the penetration test report to the client?

During a vulnerability scanning phase, a penetration tester wants to execute an Nmap scan using custom NSE scripts stored in the following folder: /home/user/scripts Which of the f...

Within a Python script, a line that states print (var) outputs the following: [{'1' : 'CentOS', '2' : 'Ubuntu'}, {'1' : 'Windows 10', '2' : 'Windows Server 2016'}] Which of the fol...

A penetration tester wrote the following comment in the final report: "Eighty-five percent of the systems tested were found to be prone to unauthorized access from the internet." W...

During a code review assessment, a penetration tester finds the following vulnerable code inside one of the web application files: <% String id = request.getParameter("id"); %> Emp...

Which of the following factors would a penetration tester MOST likely consider when testing at a location?

A penetration tester who is performing a physical assessment has achieved physical access to a call center for the assessed company. The tester is able to move freely around the ro...

A company recently moved its software development architecture from VMs to containers. The company has asked a penetration tester to determine if the new containers are configured...

Given the following script: Which of the following describes True?

A security analyst is conducting an unknown environment test from 192.168.3.3. The analyst wants to limit observation of the penetration tester's activities and lower the probabili...

A penetration tester is validating whether input validation mechanisms have been implemented in a web application. Which of the following should the tester use to determine whether...

A penetration tester learned that when users request password resets, help desk analysts change users' passwords to 123change. The penetration tester decides to brute force an inte...

A penetration tester is conducting an unknown environment test and gathering additional information that can be used for later stages of an assessment. Which of the following would...

Which of the following is a regulatory compliance standard that focuses on user privacy by implementing the right to be forgotten?

A penetration tester who was exclusively authorized to conduct a physical assessment noticed there were no cameras pointed at the dumpster for the target company. The penetration t...

A penetration tester is attempting to get more people from a target company to download and run an executable. Which of the following would be the MOST effective way for the tester...

Which of the following documents describes activities that are prohibited during a scheduled penetration test?

While performing the scanning phase of a penetration test, the penetration tester runs the following command: nmap -n -vv -sV -p- 10.10.10.23-28 After the Nmap scan is finished, th...

A penetration tester wants to accomplish ARP poisoning as part of an attack. Which of the following tools will the tester MOST likely utilize?

A penetration tester executes the following Nmap command and obtains the following output: Which of the following commands would BEST help the penetration tester discover an exploi...

During enumeration, a red team discovered that an external web server was frequented by employees. After compromising the server, which of the following attacks would BEST support...

A penetration tester is developing exploits to attack multiple versions of a common software package. The versions have different menus and features, but they have a common log-in...

Which of the following tools would be BEST suited to perform a cloud security assessment?

During the assessment of a client's cloud and on-premises environments, a penetration tester was able to gain ownership of a storage object within the cloud environment using the p...

A penetration tester wrote the following script on a compromised system: Which of the following would explain using this script instead of another tool?

During an assessment, a penetration tester Inspected a log and found a series of thousands of requests coming from a single IP address to the same URL. A few of the requests are li...

During a routine penetration test of a customer's physical data center, a penetration tester observes that no changes have been made to the production firewalls in more than five y...

After compromising a system, a penetration tester wants more information in order to decide what actions to take next. The tester runs the following commands: Which of the followin...

During a vulnerability scan a penetration tester enters the following Nmap command against all of the non-Windows clients: nmap -sX -T4 -p 21-25, 67, 80, 139, 8080 192.168.11.191 T...

In Java C/C++, variable initialization is critical because:

During a client engagement, a penetration tester runs the following Nmap command and obtains the following output: Which of the following should the penetration tester include in t...

A penetration tester is reviewing the security of a web application running in an IaaS compute instance. Which of the following payloads should the tester send to get the running p...

A penetration tester gains access to a web server and notices a large number of devices in the system ARP table. Upon scanning the web server, the tester determines that many of th...

In a wireless network assessment, penetration testers would like to discover and gather information about accessible wireless networks in the target area. Which of the following is...

After performing a web penetration test, a security consultant is ranking the findings by criticality. Which of the following standards or methodologies would be best for the consu...

A penetration tester is performing an assessment against a customer's web application that is hosted in a major cloud provider's environment. The penetration tester observes that t...

A penetration tester is conducting an assessment on 192.168.1.112. Given the following output: Which of the following is the penetration tester conducting?

During passive reconnaissance of a target organization's infrastructure, a penetration tester wants to identify key contacts and job responsibilities within the company. Which of t...

Which of the following documents would be the most helpful in determining who is at fault for a temporary outage that occurred during a penetration test?

A penetration tester discovers passwords in a publicly available data breach during the reconnaissance phase of the penetration test. Which of the following is the best action for...

A penetration tester is trying to bypass an active response tool that blocks IP addresses that have more than 100 connections per minute. Which of the following commands would allo...

During an engagement with a financial institution, a penetration tester found hard-coded credentials in a publicly accessible code repository. Those credentials allowed the penetra...

A security engineer is trying to bypass a network IPS that isolates the source when the scan exceeds 100 packets per minute. The scope of the san is to identify web servers in the...