Question 1 · 335 in bank
A penetration tester wants to send a specific network packet with custom flags and sequence numbers to a vulnerable target. Which of the following should the tester use?
Show answer
Answer: C
PT0-003ProfessionalCompTIAAll questions freePage 1 of 34
PT0-003 practice questions 1–10
CompTIA PenTest+335 questions across 34 pages are complete and free, with no account or card.
Official study references
335 questions in this bank
Free access · progress saved on this device
Question 2 · 335 in bank
Which of the following explains the reason a tester would opt to use DREAD over PTES during the planning phase of a penetration test?
Show answer
Answer: D
Question 3 · 335 in bank
A penetration tester is performing a security review of a web application. Which of the following should the tester leverage to identify the presence of vulnerable open-source libraries?
Show answer
Answer: D
Question 4 · 335 in bank
A penetration tester finds that an application responds with the contents of the /etc/passwd file when the following payload is sent:
Which of the following should the tester recommend in the report to best prevent this type of vulnerability?
Show answer
Answer: C
Question 5 · 335 in bank
A penetration tester is conducting reconnaissance for an upcoming assessment of a large corporate client. The client authorized spear phishing in the rules of engagement. Which of the following should the tester do first when developing the phishing campaign?
Show answer
Answer: C
Question 6 · 335 in bank
A penetration tester needs to test a very large number of URLs for public access. Given the following code snippet:
Which of the following changes is required?
Show answer
Answer: A
Question 7 · 335 in bank
During a penetration test, a tester captures information about an SPN account. Which of the following attacks requires this information as a prerequisite to proceed?
Show answer
Answer: B
Question 8 · 335 in bank
While performing an internal assessment, a tester uses the following command: crackmapexec smb 192.168.1.0/24 -u user.txt -p Summer123@ Which of the following is the main purpose of the command?
Show answer
Answer: C
Question 9 · 335 in bank
A penetration testing team needs to determine whether it is possible to disrupt the wireless communications for PCs deployed in the client's offices. Which of the following techniques should the penetration tester leverage?
Show answer
Answer: D
Question 10 · 335 in bank
Which of the following tasks would ensure the key outputs from a penetration test are not lost as part of the cleanup and restoration activities?
Show answer
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PT0-003 practice, question 1. 335 questions available.
About this question bank
Version 1.0.0. How we source questions