PT0-001無料問題集「CompTIA PenTest+ Certification」

質問 1

A penetration tester was able to enter an SQL injection command into a text box and gain access to the information store on the database. Which of the following is the BEST recommendation that would mitigate the vulnerability?

（A）Randomize the credentials used to log in

（B）Implement input normalization

（C）Perform system hardening

（D）Install host-based intrusion detection

正解：B 解答を投票する

質問 2

A company planned for and secured the budget to hire a consultant to perform a web application penetration test. Upon discovering vulnerabilities, the company asked the consultant to perform the following tasks:
Code review
Updates to firewall settings
Which of the following has occurred in this situation?

（A）Risk acceptance

（B）Post-mortem review

（C）Scope creep

（D）Threat prevention

正解：C 解答を投票する

質問 3

When considering threat actor scoping prior to an engagement, which of the following characteristics makes an APT challenging to emulate?

（A）Amount of bandwidth available for DoS attacks

（B）Development of custom zero-day exploits and tools

（C）Tenacity and efficacy of social engineering attacks

（D）Leveraging the dark net for non-attribution

正解：C 解答を投票する

質問 4

A penetration tester executes the following commands:
C:\>%userprofile%\jtr.exe
This program has been blocked by group policy
C:\> accesschk.exe -w -s -q -u Users C:\Windows
rw C:\Windows\Tracing
C:\>copy %userprofile%\jtr.exe C:\Windows\Tracing
C:\Windows\Tracing\jtr.exe
jtr version 3.2...
jtr>
Which of the following is a local host vulnerability that the attacker is exploiting?

（A）Shell escape

（B）Insecure file permissions

（C）Application Whitelisting

（D）Writable service

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

While conducting information gathering, a penetration tester is trying to identify Windows hosts. Which of the following characteristics would be BEST to use for fingerprinting?

（A）The system responds with a TTL of 128.

（B）The system responds with port 22 open.

（C）The system responds with a TCP window size of 5840.

（D）The system responds with a MAC address that begins with 00:0A:3B.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

A penetration tester is connected to a client's local network and wants to passively identify cleartext protocols and potentially sensitive data being communicated across the network. Which of the following is the BEST approach to take?

（A）Run an MITM attack.

（B）Run a port scan.

（C）Run a stress test.

（D）Run a network vulnerability scan.

正解：A 解答を投票する

質問 7

A penetration tester discovers an anonymous FTP server that is sharing the C:\drive. Which of the following is the BEST exploit?

（A）Place a batch script in the startup folder for all users.

（B）Download, modify, and reupload a compromised registry to obtain code execution.

（C）Change a service binary location path to point to the tester's own payload.

（D）Escalate the tester's privileges to SYSTEM using the at.exe command.

正解：C 解答を投票する

質問 8

A penetration tester observes that several high numbered ports are listening on a public web server. However, the system owner says the application only uses port 443. Which of the following would be BEST to recommend?

（A）Filter port 443 to specific IP addresses

（B）Disable unneeded services.

（C）Transition the application to another port

（D）Implement a web application firewall

正解：B 解答を投票する

質問 9

Which of the following properties of the penetration testing engagement agreement will have the largest impact on observing and testing production systems at their highest loads?

（A）Having management sign-off on intrusive testing

（B）Establishing a white-box testing engagement

（C）Setting a schedule of testing access times

（D）Creating a scope of the critical production systems

正解：A 解答を投票する

質問 10

A penetration tester entered the following information into the browser URL:
https://www.example.com/login.php?file=../../../../../../../etc/passwd
The server responded with the data contained in the server's sensitive data file. Which of the following types of vulnerabilities is MOST likely being exploited?

（A）Command injection

（B）Weak credentials

（C）Race conditions

（D）Directory traversal

正解：D 解答を投票する

質問 11

An assessor begins an internal security test of the Windows domain internal.comptia.net. The assessor is given network access via DHCP, but is not given any network maps or target IP addresses. Which of the following commands can the assessor use to find any likely Windows domain controllers?

（A）dig -q any _lanman._tcp.internal.comptia.net

（B）dig -q any _ntlm._tcp.internal.comptia.net

（C）dig -q any _smtp._tcp.internal.comptia.net

（D）dig -q any _kerberos._tcp.internal.comptia.net

正解：D 解答を投票する

質問 12

A penetration tester discovers SNMP on some targets. Which of the following should the penetration tester try FIRST?

（A）Upload a new config file.

（B）Conduct a MITM.

（C）Use default credentials.

（D）Sniff SNMP traffic.

正解：C 解答を投票する

PT0-001 無料問題集「CompTIA PenTest+ Certification」

弊社を連絡する

関連リンク

トップ試験