[Apr 06, 2022] Ultimate PT0-001 Guide to Prepare Free Latest CompTIA Practice Tests Dumps [Q164-Q182] : Exams Labs Braindumps : http://blog.examslabs.com

NEW QUESTION 164
Which of the following attacks is commonly combined with cross-site scripting for session hijacking?

CSRF

Clickjacking

SQLI

RFI

NEW QUESTION 165
A penetration tester calls human resources and begins asking open-ended questions Which of the following social engineering techniques is the penetration tester using?

Interrogation

Elicitation

Impersonation

Spear phishing

NEW QUESTION 166
After gaining initial low-privilege access to a Linux system, a penetration tester identifies an interesting binary in a user’s folder titled “changepass”
-sr -xr -x 1 root root 6443 Oct 18 2017 /home/user/changepass
Using “strings” to print ASCII printable characters from changepass, the tester notes the following:
$ strings changepass
Exit
setuid
strmp
GLINC _2.0
ENV_PATH
%s/changepw
malloc
strlen
Given this information, which of the following is the MOST likely path of exploitation to achieve root privileges on the machines?

Copy changepass to a writable directory and export the ENV_PATH environmental variable to the path of a token-stealing binary titled changepw. Then run changepass

Create a copy of changepass in the same directory, naming it changpw. Export the ENV_PATH environmental variable to the path “/home/user’. Then run changepass

Export the ENV_PATH environmental variable to the path of a writable directory that contains a token-stealing binary title changepw

Run changepass within the current directory with sudo after exporting the ENV_PATH environmental variable to the path of ‘/usr/local/bin’

NEW QUESTION 167
Click the exhibit button.

A penetration tester is performing an assessment when the network administrator shows the tester a packet sample that is causing trouble on the network. Which of the following types of attacks should the tester stop?

SNMP brute forcing

ARP spoofing

DNS cache poisoning

SMTP relay

NEW QUESTION 168
A penetration tester successfully exploits a Windows host and dumps the hashes Which of the following hashes can the penetration tester use to perform a pass-the-hash attack?
A)

B)

C)

D)

Option A

Option B

Option C

Option D

NEW QUESTION 169
Joe, a penetration tester, has received basic account credentials and logged into a Windows system. To escalate his privilege, from which of the following places is he using Mimikatz to pull credentials?

LSASS

SAM database

Active Directory

Registry

NEW QUESTION 170
: 88
A penetration tester was able to enter an SQL injection command into a text box and gain access to the information store on the database. Which of the following is the BEST recommendation that would mitigate the vulnerability?

Randomize the credentials used to log in

Install host-based intrusion detection

Implement input normalization

Perform system hardening

NEW QUESTION 171
A client gives a penetration tester a /8 network range to scan during a week-long engagement. Which of the following tools would BEST complete this task quickly?

Massscan

Nmap

Angry IP scanner

Unicorn scan

NEW QUESTION 172
Which of the following reasons does penetration tester needs to have a customer’s point-of
-contact information available at all time? (Select THREE).

To report indicators of compromise

To report findings that cannot be exploited

To report critical findings

To report the latest published exploits

To update payment information

To report a server that becomes unresponsive

To update the statement o( work

To report a cracked password

NEW QUESTION 173
A company planned for and secured the budget to hire a consultant to perform a web application penetration test. Upon discovered vulnerabilities, the company asked the consultant to perform the following tasks:
* Code review
* Updates to firewall setting

Scope creep

Post-mortem review

Risk acceptance

Threat prevention

NEW QUESTION 174
When performing compliance-based assessments, which of the following is the MOST important Key consideration?

Additional rate

Company policy

Impact tolerance

Industry type

NEW QUESTION 175
A client needs to be PCI compliant and has external-facing web servers.
Which of the following CVSS vulnerability scores would automatically bring the client out of compliance standards such as PCI 3.x?

2.9

3.0

4.0

5.9

NEW QUESTION 176
After successfully enumerating users on an Active Directory domain controller using enum4linux a penetration tester wants to conduct a password-guessing attack Given the below output:

Which of the following can be used to extract usernames from the above output prior to conducting the attack?

cat enum41inux_output.txt > grep -v user I sed ‘s/[//’ I sed ‘s/]//’ 2> usernames.txt

grep user enuza41inux_output.txt I awk ‘{print $1}’ | cut -d[ -S2 I cut -d] -f1 > username.txt

grep -i rid v< enura.41inux_output. txt’ | cut -d: -S2 i cut -d] -f1 > usernames. txt

cut -d: -f2 enum41inux_output.txt | awk ‘{print S2}’ I cut -d: -f1 > usernaraes.txt

NEW QUESTION 177
During a penetration test, you gain access to a system with a limited user interface. This machine appears to have access to an isolated network that you would like to port scan.
INSTRUCTIONS:
Analyze the code segments to determine which sections are needed to complete a port scanning script.
Drag the appropriate elements into the correct locations to complete the script.

NEW QUESTION 178
A company received a report with the following finding
While on the internal network the penetration tester was able to successfully capture SMB broadcasted user ID and password information on the network and decode this information This allowed the penetration tester to then join their own computer to the ABC domain Which of the following remediation’s are appropriate for the reported findings’? (Select TWO)

Set the Schedule Task Service from Automatic to Disabled

Enable network-level authentication

Remove the ability from Domain Users to join domain computers to the network

Set the netlogon service from Automatic to Disabled

Set up a SIEM alert to monitor Domain joined machines

Set “Digitally sign network communications” to Always

NEW QUESTION 179
A penetration testing company was hired to conduct a penetration test against Company A’s network of 20.10.10.0/24 and mail.companyA.com. While the penetration testing company was in the information gathering phase, it was discovered that the mail.companyA.com IP address resolved to 20.15.1.2 and belonged to Company B.
Which of the following would be the BEST solution to conduct penetration testing against mail.companyA.com?

The penetration tester should conduct penetration testing against mail.companyA.com because the domain name is in scope.

The penetration tester should ask Company A for a signed statement giving permission to conduct a test against mail.companyA.com.

The penetration tester should ignore mail.companyA.com testing and complete only the network range 20.10.10.0/24.

The penetration tester should only use passive open source intelligence gathering methods leveraging publicly available information to analyze mail.companyA.com.

NEW QUESTION 180
Which of the following would BEST prevent fence jumping at a facility?

Install proper lighting around the perimeter of the facility.

Decrease the distance between the links in the fence.

Add a top guard on the fence that faces away from the facility.

Place video cameras that are angled toward the fence.

NEW QUESTION 181
A company requested a penetration tester review the security of an in-house-developed Android application. The penetration tester received an APK file to support the assessment.
The penetration tester wants to run SAST on the APK file. Which of the following preparatory steps must the penetration tester do FIRST? (Select TWO)

Convert to JAR

Decompile

Cross-compile the application

Convert JAR files to DEX

Re-sign the APK

Attach to ADB

NEW QUESTION 182
When conducting reconnaissance against a target, which of the following should be used to avoid directory communicating with the target?

Nmap tool

Maltego community edition

Nessus vulnerability scanner

OpenVAS

Melasploit

[Apr 06, 2022] Ultimate PT0-001 Guide to Prepare Free Latest CompTIA Practice Tests Dumps [Q164-Q182]

What preparation options should you use?

Target Audience for CompTIA PT0-001 Exam