CompTIA PenTest+335 questions across 34 pages are complete and free, with no account or card.
335 questions in this bank
Free access · progress saved on this device
A penetration tester is ready to add shellcode for a specific remote executable exploit. The tester is trying to prevent the payload from being blocked by anti-malware that is running on the target. Which of the following commands should the tester use to obtain shell access?
Answer: A
A penetration tester is investigating a buffer overflow on the myfile binary. The tester wants to send a payload to help identify the exact offset to inject the memory address to take control of the buffer. Which of the following would allow the penetration tester to quickly identify the offset?
Answer: D
A penetration tester is attempting to exfiltrate sensitive data from a client environment without alerting the client’s blue team. Which of the following exfiltration methods most likely remain undetected?
Answer: C
A penetration tester reviews the following output:
Which of the following most likely describes the function of this system?
Answer: B
During a penetration test for a client that has a diverse infrastructure, the tester scans the network using Nmap and observes the following output:
Which of the following would most likely be the target device?
Answer: C
A tester compromises a shared host that is manually audited every week due to the absence of a SIEM. Which of the following is the best way to reduce the chances of being detected?
Answer: C
A penetration tester wants to verify whether passwords from a leaked password list can be used to access an SSH server as a legitimate user. Which of the following is the most appropriate tool for this task?
Answer: D
A penetration tester discovers a deprecated directory in which files are accessible to anyone. Which of the following would most likely assist the penetration tester in finding sensitive information without raising suspicion?
Answer: A
A penetration tester gains initial access to a Windows workstation on a client’s network. The tester wants to determine the next target but does not want to install software on the workstation. Which of the following is the best tool to list potential targets?
Answer: B
A penetration tester completes an authenticated vulnerability scan of a host and receives the following results:
Which of the following is most likely to cause stability when a session is created on a target machine?
Answer: C
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PT0-003 practice, question 201. 335 questions available.
Version 1.0.0. How we source questions