CompTIA PT1-002 - CompTIA PenTest+ Certification Exam Exam
Page: 3 / 22
Total 110 questions
Question #11 (Topic: Topic 1)
A penetration tester who is doing a company-requested assessment would like to send traffic to another system using double tagging. Which of the following
techniques would BEST accomplish this goal?
techniques would BEST accomplish this goal?
A. RFID cloning
B. RFID tagging
C. Meta tagging
D. Tag nesting
Answer: C
Question #12 (Topic: Topic 1)
SIMULATION
You are a penetration tester running port scans on a server.
INSTRUCTIONS
Part 1: Given the output, construct the command that was used to generate this output from the available options.
Part 2: Once the command is appropriately constructed, use the given output to identify the potential attack vectors that should be investigated further.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
[CompTIA-PT1-002-1.0/xmlfile-10_1.png]
[CompTIA-PT1-002-1.0/xmlfile-11_1.png]
You are a penetration tester running port scans on a server.
INSTRUCTIONS
Part 1: Given the output, construct the command that was used to generate this output from the available options.
Part 2: Once the command is appropriately constructed, use the given output to identify the potential attack vectors that should be investigated further.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
[CompTIA-PT1-002-1.0/xmlfile-10_1.png]
[CompTIA-PT1-002-1.0/xmlfile-11_1.png]
Answer: See explanation below.
Question #13 (Topic: Topic 1)
A penetration tester is exploring a clientג€™s website. The tester performs a curl command and obtains the following:
* Connected to 10.2.11.144 (::1) port 80 (#0)
> GET /readmine.html HTTP/1.1
> Host: 10.2.11.144
> User-Agent: curl/7.67.0
> Accept: */*
>
* Mark bundle as not supporting multiuse
< HTTP/1.1 200
< Date: Tue, 02 Feb 2021 21:46:47 GMT
< Server: Apache/2.4.41 (Debian)
< Content-Length: 317
< Content-Type: text/html; charset=iso-8859-1
<
<!DOCTYPE html>
<html lang=ג€enג€>
<head>
<meta name=ג€viewportג€ content=ג€width=device-widthג€ />
<meta http-equiv=ג€Content-Typeג€ content=ג€text/html; charset=utf-8ג€ />
<title>WordPress › ReadMe</title>
<link rel=ג€stylesheetג€ href=ג€wp-admin/css/install.css?ver=20100228ג€ type=ג€text/cssג€ />
</head>
Which of the following tools would be BEST for the penetration tester to use to explore this site further?
* Connected to 10.2.11.144 (::1) port 80 (#0)
> GET /readmine.html HTTP/1.1
> Host: 10.2.11.144
> User-Agent: curl/7.67.0
> Accept: */*
>
* Mark bundle as not supporting multiuse
< HTTP/1.1 200
< Date: Tue, 02 Feb 2021 21:46:47 GMT
< Server: Apache/2.4.41 (Debian)
< Content-Length: 317
< Content-Type: text/html; charset=iso-8859-1
<
<!DOCTYPE html>
<html lang=ג€enג€>
<head>
<meta name=ג€viewportג€ content=ג€width=device-widthג€ />
<meta http-equiv=ג€Content-Typeג€ content=ג€text/html; charset=utf-8ג€ />
<title>WordPress › ReadMe</title>
<link rel=ג€stylesheetג€ href=ג€wp-admin/css/install.css?ver=20100228ג€ type=ג€text/cssג€ />
</head>
Which of the following tools would be BEST for the penetration tester to use to explore this site further?
A. Burp Suite
B. DirBuster
C. WPScan
D. OWASP ZAP
Answer: A
Question #14 (Topic: Topic 1)
A penetration tester wrote the following script to be used in one engagement:
[CompTIA-PT1-002-1.0/xmlfile-13_1.png]
Which of the following actions will this script perform?
[CompTIA-PT1-002-1.0/xmlfile-13_1.png]
Which of the following actions will this script perform?
A. Look for open ports.
B. Listen for a reverse shell.
C. Attempt to flood open ports.
D. Create an encrypted tunnel.
Answer: A
Question #15 (Topic: Topic 1)
A company conducted a simulated phishing attack by sending its employees emails that included a link to a site that mimicked the corporate SSO portal. Eighty
percent of the employees who received the email clicked the link and provided their corporate credentials on the fake site. Which of the following
recommendations would BEST address this situation?
percent of the employees who received the email clicked the link and provided their corporate credentials on the fake site. Which of the following
recommendations would BEST address this situation?
A. Implement a recurring cybersecurity awareness education program for all users.
B. Implement multifactor authentication on all corporate applications.
C. Restrict employees from web navigation by defining a list of unapproved sites in the corporate proxy.
D. Implement an email security gateway to block spam and malware from email communications.
Answer: A
