Question 11 · 335 in bank
A tester gains initial access to a server and needs to enumerate all corporate domain DNS records. Which of the following commands should the tester use?
Show answer
Answer: C
PT0-003ProfessionalCompTIAAll questions freePage 2 of 34
PT0-003 practice questions 11–20
CompTIA PenTest+335 questions across 34 pages are complete and free, with no account or card.
Official study references
335 questions in this bank
Free access · progress saved on this device
Question 12 · 335 in bank
A penetration tester is performing network reconnaissance. The tester wants to gather information about the network without causing detection mechanisms to flag the reconnaissance activities. Which of the following techniques should the tester use?
Show answer
Answer: A
Question 13 · 335 in bank
A penetration tester reviews a SAST vulnerability scan report. The following lines of code have been reported as vulnerable:
Which of the following is the best method to remediate this vulnerability?
Show answer
Answer: A
Question 14 · 335 in bank
During a security assessment, a penetration tester uses a tool to capture plaintext log-in credentials on the communication between a user and an authentication system. The tester wants to use this information for further unauthorized access. Which of the following tools is the tester using?
Show answer
Answer: B
Question 15 · 335 in bank
A penetration tester established an initial compromise on a host. The tester wants to pivot to other targets and set up an appropriate relay. The tester needs to enumerate through the compromised host as a relay from the tester's machine. Which of the following commands should the tester use to do this task from the tester's host?
Show answer
Answer: D
Question 16 · 335 in bank
A penetration tester is unable to identify the Wi-Fi SSID on a client's cell phone. Which of the following techniques would be most effective to troubleshoot this issue?
Show answer
Answer: B
Question 17 · 335 in bank
During a web application assessment, a penetration tester identifies an input field that allows JavaScript injection. The tester inserts a line of JavaScript that results in a prompt, presenting a text box when browsing to the page going forward. Which of the following types of attacks is this an example of?
Show answer
Answer: C
Question 18 · 335 in bank
A penetration tester attempts unauthorized entry to the company’s server room as part of a security assessment. Which of the following is the best technique to manipulate the lock pins and open the door without the original key?
Show answer
Answer: D
Question 19 · 335 in bank
Select 2Which of the following technologies is most likely used with badge cloning? (Choose two.)
Show answer
Answer: AB
Question 20 · 335 in bank
During a penetration test of a web application, the tester gains full access to the application's source code. The application repository includes thousands of code files. Given that the assessment timeline is very short, which of the following approaches would allow the tester to identify hard-coded credentials most effectively?
Show answer
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PT0-003 practice, question 11. 335 questions available.
About this question bank
Version 1.0.0. How we source questions