Download Free CompTIA PT0-001 Real Exam Questions Download [Q52-Q66]

QUESTION 52
An engineer, who is conducting a penetration test for a web application, discovers the user login process sends from field data using the HTTP GET method. To mitigate the risk of exposing sensitive information, the form should be sent using an:

QUESTION 53
A penetration tester reviews the scan results of a web application.
Which of the following vulnerabilities is MOST critical and should be prioritized for exploitation?

QUESTION 54
A company contracted a firm specializing in penetration testing to assess the security of a core business application. The company provided the firm with a copy of the Java bytecode. Which of the following steps must the firm take before it can run a static code analyzer?

QUESTION 55
During an internal penetration test, several multicast and broadcast name resolution requests are observed traversing the network. Which of the following tools could be used to impersonate network resources and collect authentication requests?

QUESTION 56
Place each of the following passwords in order of complexity from least complex (1) to most complex (4), based on the character sets represented Each password may be used only once

QUESTION 57
A financial institution is asking a penetration tester to determine if collusion capabilities to produce wire fraud are present. Which of the following threat actors should the penetration tester portray during the assessment?

QUESTION 58
Given the following script:

Which of the following BEST describes the purpose of this script?

QUESTION 59
A penetration tester is perform initial intelligence gathering on some remote hosts prior to conducting a vulnerability < The tester runs the following command nmap -D 192.168.1.1,192.168.1.2,192.168.1.3 -sV -o -max rate 2 192. 168.130 Which ol the following BEST describes why multiple IP addresses are specified?

QUESTION 60
A penetration tester runs a script that queries the domain controller for user service principal names. Which of the following techniques is MOST likely being attempted?

QUESTION 61
An attacker uses SET to make a copy of a company’s cloud-hosted web mail portal and sends an email m to obtain the CEO s login credentials Which of the following types of attacks is this an example of?

QUESTION 62
Which of the following is the purpose of an NDA?

QUESTION 63
A penetration tester is reviewing the following output from a wireless sniffer:

Which of the following can be extrapolated from the above information?

QUESTION 64
A penetration tester successfully exploits a DM2 server that appears to be listening on an outbound port The penetration tester wishes to forward that traffic back to a device Which of the following are the BEST tools to use few this purpose? (Select TWO)

QUESTION 65
Given the following Python code:
a = ‘abcdefghijklmnop’
a[::2]
Which of the following will result?

QUESTION 66
Which of the following commands would allow a penetration tester to access a private network from the Internet in Metasploit?