Question 321 · 335 in bank
A penetration tester wants to perform static analysis of a Java application. The tester has a copy of the archive file. Which of the following must the tester do first to accomplish this goal?
Show answer
Answer: A
CompTIA PenTest+335 questions across 34 pages are complete and free, with no account or card.
335 questions in this bank
Free access · progress saved on this device
A penetration tester wants to perform static analysis of a Java application. The tester has a copy of the archive file. Which of the following must the tester do first to accomplish this goal?
Answer: A
A penetration tester compromises a developer's workstation and believes the individual may have access to Amazon cloud compute resources. Which of the following commands is least likely to trigger SOC detections to confirm access?
Answer: A
Testing and reporting activities are complete. A penetration tester needs to verify that exploited systems have been restored to preengagement conditions. Which of the following would be most appropriate for the tester to do?
Answer: B
A penetration tester conducts a web application assessment and receives the following Set-Cookie upon logging in: Set-Cookie auth=UGVudGVzdFVzZXI6OTE1MzYK Upon analysis, the penetration tester determines this is a Base64-encoded string, which when decoded reads: Pentestuser:91536 - The penetration tester logs out, logs back in, and sees the decoded string now reads: Pentestuser:91944 - Which of the following attacks will the penetration tester most likely conduct based on this information?
Answer: D
A penetration tester obtains initial access as a standard user on a server in an AD environment. This server is the only one in the environment where the account is logged in. The tester needs to obtain the credentials for this account to further the attack but cannot elevate on this server. Which of the following tools should the tester use to obtain the password?
Answer: D
During a red-team operation, a tester gains local administrator access to a Windows workstation. The tester's goal is to maintain long-term access without creating new services or modifying scheduled tasks because the blue team monitors both. The tester decides to automatically launch a payload upon each user login. Which of the following methods best supports this persistence goal?
Answer: C
A penetration tester conducts a web application test and wants to enumerate the file folder structure https://testsite.com. Which of the following is the correct command?
Answer: B
A penetration tester wants to collect a client's confidential information during an internal penetration test. Which of the following best meets the tester's objective?
Answer: B
A penetration tester reviews the TTL values obtained from different systems. Which of the following best explains what the penetration tester wants to accomplish?
Answer: D
A tester disables the C2 infrastructure, ensures all sessions are exited, and verifies that removal scripts were run. However, firewall logs still show a few hosts issue connectivity attempts every hour. Which of the following is the most likely reason for the continued connectivity attempts?
Answer: C
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PT0-003 practice, question 321. 335 questions available.
Version 1.0.0. How we source questions