Question 151 · 335 in bank
Which of the following elements of a penetration test report can be used to most effectively prioritize the remediation efforts for all the findings?
Show answer
Answer: C
PT0-003ProfessionalCompTIAAll questions freePage 16 of 34
PT0-003 practice questions 151–160
CompTIA PenTest+335 questions across 34 pages are complete and free, with no account or card.
Official study references
335 questions in this bank
Free access · progress saved on this device
Question 152 · 335 in bank
A penetration tester observes the following output from an Nmap command while attempting to troubleshoot connectivity to a Linux server.
Which of the following is the most likely reason for the connectivity issue?
Show answer
Answer: A
Question 153 · 335 in bank
Which of the following methods should a physical penetration tester employ to access a rarely used door that has electronic locking mechanisms?
Show answer
Answer: E
Question 154 · 335 in bank
A penetration tester finds an un authenticated RCE vulnerability on a web server and wants to use it to enumerate other servers on the local network. The web server is behind a firewall that allows only an incoming connection to TCP ports 443 and 53 and unrestricted outbound TCP connections. The target web server is https://target.comptia.org. Which of the following should the tester use to perform the task with the fewest web requests?
Show answer
Answer: A
Question 155 · 335 in bank
With one day left to complete the testing phase of an engagement, a penetration tester obtains the following results from an Nmap scan:
Which of the following tools should the tester use to quickly identify a potential attack path?
Show answer
Answer: B
Question 156 · 335 in bank
A tester is working on an engagement that has evasion and stealth requirements. Which of the following enumeration methods is the least likely to be detected by the IDS?
Show answer
Answer: A
Question 157 · 335 in bank
A penetration tester needs to confirm the version number of a client’s web-application server. Which of the following techniques should the penetration tester use?
Show answer
Answer: C
Question 158 · 335 in bank
A penetration tester wants to identify all the TLS versions used in a web service in order to determine potentially insecure versions. Which of the following commands should the tester use?
Show answer
Answer: A
Question 159 · 335 in bank
Eight months after the completion of a penetration test, the client emails the penetration tester to debate the validity of several findings. The findings are now posing a hindrance to compliance certifications. Which of the following would most likely assist the penetration tester with de-escalation?
Show answer
Answer: D
Question 160 · 335 in bank
A penetration tester is evaluating the security of a corporate client’s web application using federated access. Which of the following approaches has the least possibility of blocking the IP address of the tester’s machine?
Show answer
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PT0-003 practice, question 151. 335 questions available.
About this question bank
Version 1.0.0. How we source questions