CompTIA PT0-003 - CompTIA PenTest+ Exam
Page: 3 / 69
Total 344 questions
Question #11 (Topic: Exam A)
A tester gains initial access to a server and needs to enumerate all corporate domain DNS records. Which of the following commands should the tester use?
A. dig +short A AAAA local.domain
B. nslookup local.domain
C. dig afxr @local.dns.server
D. nslookup -server local.dns.server local.domain *
Answer: C
Question #12 (Topic: Exam A)
A penetration tester is performing network reconnaissance. The tester wants to gather information about the network without causing detection mechanisms to flag the reconnaissance activities. Which of the following techniques should the tester use?
A. Sniffing
B. Banner grabbing
C. TCP/UDP scanning
D. Ping sweeps
Answer: A
Question #13 (Topic: Exam A)
A penetration tester reviews a SAST vulnerability scan report. The following lines of code have been reported as vulnerable:
Which of the following is the best method to remediate this vulnerability?
Which of the following is the best method to remediate this vulnerability?
A. Implementing a logging framework
B. Removing the five code lines reported with issues
C. Initiating a secure coding-awareness program with all the developers
D. Documenting the vulnerability as a false positive
Answer: A
Question #14 (Topic: Exam A)
During a security assessment, a penetration tester uses a tool to capture plaintext log-in credentials on the communication between a user and an authentication system. The tester wants to use this information for further unauthorized access. Which of the following tools is the tester using?
A. Burp Suite
B. Wireshark
C. Zed Attack Proxy
D. Metasploit
Answer: B
Question #15 (Topic: Exam A)
A penetration tester established an initial compromise on a host. The tester wants to pivot to other targets and set up an appropriate relay. The tester needs to enumerate through the compromised host as a relay from the tester's machine. Which of the following commands should the tester use to do this task from the tester's host?
A. attacker_host$ nmap -sT <target_cidr> | nc -n <compromised_host> 22
B. attacker_host$ mknod backpipe p
attacker_host$ nc -l -p 8000 | 0 <backpipe | nc <target_cidr> 80 | tee backpipe C. attacker_host$ nc -nlp 8000 | nc -n <target_cidr>
attacker_host$ nmap -sT 127.0.0.1 8000 D. attacker_host$ proxychains nmap -sT <target_cidr>
attacker_host$ nc -l -p 8000 | 0 <backpipe | nc <target_cidr> 80 | tee backpipe C. attacker_host$ nc -nlp 8000 | nc -n <target_cidr>
attacker_host$ nmap -sT 127.0.0.1 8000 D. attacker_host$ proxychains nmap -sT <target_cidr>
Answer: D
