PT0-003 practice questions 171–180

1. Question 171 · 335 in bank

   A penetration tester completed OSINT work and needs to identify common subdomains for mydomain.com. Which of the following is the best command for the tester to use?

   • Anslookup mydomain.com >> /path/to/results.txt
   • Bcrunch 1 2 | xargs -n 1 -I 'X' nslookup X.mydomain.com
   • Cdig @8.8.8.8 mydomain.com any >> /path/to/results.txt
   • Dcat wordlist.txt | xargs -n 1 -I 'X' host X.mydomain.com

   Show answer

   Answer: D

   Next question

2. Question 172 · 335 in bank

   Which of the following should a penetration tester do when conducting post-engagement cleanup?

   • AReturn the system to its original state.
   • BClose any open ports.
   • CShut down the infected system.
   • DDelete all activity logs.

   Show answer

   Answer: A

   Next question

3. Question 173 · 335 in bank

   While performing a red-team exercise, a penetration tester uses a reading device to extract data from an employee's access badge. The tester creates a copy for unauthorized entry. Which of the following best describes this attack?

   • ASmurfing
   • BCard skimming
   • COn-path attack
   • DCredential stuffing

   Show answer

   Answer: B

   Next question

4. Question 174 · 335 in bank

   Which of the following security controls should be implemented when systems that are covered by a compliance agreement are maintained separately from other elements of an organization's infrastructure?

   • AKey management
   • BNetwork monitoring
   • CData isolation
   • DPenetration test

   Show answer

   Answer: C

   Next question

5. Question 175 · 335 in bank

   A penetration tester needs to launch an Nmap scan to find the state of the port for both TCP and UDP services. Which of the following commands should the tester use?

   • Anmap -sU -sW -p 1-65535 example.com
   • Bnmap -sU -sY -p 1-65535 example.com
   • Cnmap -sU -sT -p 1-65535 example.com
   • Dnmap -sU -sN -p 1-65535 example.com

   Show answer

   Answer: C

   Next question

6. Question 176 · 335 in bank

   A penetration tester gains access to a domain member server and wants to identify which potential targets are available to attack. Which of the following tools should the penetration tester use?

   • ANetcat
   • BWireshark
   • CNmap
   • DResponder

   Show answer

   Answer: C

   Next question

7. Question 177 · 335 in bank

   During a web application assessment, a penetration tester identifies an administrative tool that would allow for the production database to be deleted without authorization. Which of the following is most important for the penetration tester to consider before proceeding with testing?

   • ARules of engagement
   • BBusiness continuity planning
   • CAgreed-upon testing hours
   • DApplication terms of use

   Show answer

   Answer: A

   Next question

8. Question 178 · 335 in bank

   A company hires a penetration tester to perform an external attack surface review as part of a security engagement. The company informs the tester that the main company domain to investigate is comptia.org. Which of the following should the tester do to accomplish the assessment objective?

   • APerform information-gathering techniques to review internet-facing assets for the company.
   • BPerform a phishing assessment to try to gain access to more resources and users’ computers.
   • CPerform a physical security review to identify vulnerabilities that could affect the company.
   • DPerform a vulnerability assessment over the main domain address provided by the client.

   Show answer

   Answer: A

   Next question

9. Question 179 · 335 in bank

   The following file was obtained during reconnaissance:

   

   Which of the following is most likely to be successful if a penetration tester achieves non-privileged user access?

   • AExposure of other users’ sensitive data
   • BUnauthorized access to execute binaries via sudo
   • CHijacking the default user login shells
   • DCorrupting the skeleton configuration file

   Show answer

   Answer: A

   Next question

10. Question 180 · 335 in bank

    A penetration tester uses a pair of crutches to access a client's physical location. Which of the following is the tester most likely trying to do?

    • ATailgating
    • BImpersonation
    • CBadge cloning
    • DLock picking

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PT0-003 practice, question 171. 335 questions available.