Question 141 · 335 in bank
Which of the following will reduce the possibility of introducing errors or bias in a penetration test report?
Show answer
Answer: B
PT0-003ProfessionalCompTIAAll questions freePage 15 of 34
PT0-003 practice questions 141–150
CompTIA PenTest+335 questions across 34 pages are complete and free, with no account or card.
Official study references
335 questions in this bank
Free access · progress saved on this device
Question 142 · 335 in bank
A penetration tester identifies the URL for an internal administration application while following DevOps team members on their commutes. Which of the following attacks did penetration tester most likely use?
Show answer
Answer: A
Question 143 · 335 in bank
During an assessment, a penetration tester obtains access to an internal server and would like to perform further reconnaissance by capturing LLMNR traffic. Which of the following tools should the tester use?
Show answer
Answer: C
Question 144 · 335 in bank
A penetration tester needs to obtain sensitive data from several executives who regularly work while commuting by train. Which of the following methods should the tester use for this task?
Show answer
Answer: A
Question 145 · 335 in bank
While performing reconnaissance, a penetration tester attempts to identify publicly accessible ICS and IoT systems. Which of the following tools is most effective for this task?
Show answer
Answer: B
Question 146 · 335 in bank
A penetration tester successfully gained access to manage resources and services within the company’s cloud environment. This was achieved by exploiting poorly secured administrative credentials that had extensive permissions across the network. Which of the following credentials was the tester able to obtain?
Show answer
Answer: A
Question 147 · 335 in bank
Which of the following frameworks can be used to classify threats?
Show answer
Answer: B
Question 148 · 335 in bank
A penetration tester is enumerating a Linux system. The goal is to modify the following script to provide more comprehensive system information: #!/bin/bash ps aux >> linux enum.txt Which of the following lines would provide the most comprehensive enumeration of the system?
Show answer
Answer: A
Question 149 · 335 in bank
During an assessment, a penetration tester sends the following request: POST /services/v1/users/create HTTP/1.1 Host: target-application.com - Content-Type: application/json - Content-Length: [dynamic] Authorization: Bearer [FUZZE] Which of the following attacks is the penetration tester performing?
Show answer
Answer: B
Question 150 · 335 in bank
During a penetration test, the tester identifies several unused services that are listening on all targeted internal laptops:
Which of the following technical controls should the tester recommend to reduce the risk of compromise?
Show answer
Answer: C
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PT0-003 practice, question 141. 335 questions available.
About this question bank
Version 1.0.0. How we source questions