Latest Feb 10, 2022 PT0-001 Brain Dump: A Study Guide with Tips & Tricks for passing Exam
PT0-001 Question Bank: Free PDF Download Recently Updated Questions
NEW QUESTION 134
A recently concluded penetration test revealed that a legacy web application is vulnerable lo SQL injection Research indicates that completely remediating the vulnerability would require an architectural change, and the stakeholders are not m a position to risk the availability of the application Under such circumstances, which of the following controls are low-effort, short-term solutions to minimize the SQL injection risk?
(Select TWO).
- A. Use a blacklist approach for SQL statements.
- B. Identify the source of malicious input and block the IP address.
- C. Use a whitelist approach for SQL statements.
- D. Identify and sanitize all user inputs.
- E. Identify and eliminate dynamic SQL from stored procedures.
- F. Identify and eliminate inline SQL statements from the code.
Answer: A,C
NEW QUESTION 135
A penetration tester runs the following from a compromised box 'python -c -import pty;Pty.sPawn(
"/bin/bash").' Which of the following actions is the tester taking?
- A. Creating a sandbox
- B. Removing the Bash history
- C. Upgrading the shell
- D. Capturing credentials
Answer: C
NEW QUESTION 136
An individual has been hired by an organization after passing a background check. The individual has been passing information to a competitor over a period of time.
Which of the following classifications BEST describes the individual?
- A. Insider threat
- B. APT
- C. Hacktivist
- D. Script kiddie
Answer: A
NEW QUESTION 137
An attacker uses SET to make a copy of a company's cloud-hosted web mail portal and sends an email m to obtain the CEO s login credentials Which of the following types of attacks is this an example of?
- A. Elicitation attack
- B. Impersonation attack
- C. Spear phishing attack
- D. Drive-by download attack
Answer: A
NEW QUESTION 138
The results of a basic compliance scan show a subset of assets on a network. This data differs from what is shown on the network architecture diagram, which was supplied at the beginning of the test. Which of the following are the MOST likely causes for this difference? (Select TWO)
- A. Storage access
- B. Misconfigured DHCP server
- C. Network access controls
- D. Incorrect credentials
- E. Limited network access
Answer: A,E
NEW QUESTION 139
A recently concluded penetration test revealed that a legacy web application is vulnerable to SQL injection.
Research indicates that completely remediating the vulnerability would require an architectural change, and the stakeholders are not in a position to risk the availability on the application. Under such circumstances, which of the following controls are low-effort, short-term solutions to minimize the SQL injection risk? (Choose two.)
- A. Identity and eliminate inline SQL statements from the code.
- B. Identify the source of malicious input and block the IP address.
- C. Use a whitelist approach for SQL statements.
- D. Identify and eliminate dynamic SQL from stored procedures.
- E. Use a blacklist approach for SQL statements.
- F. Identify and sanitize all user inputs.
Answer: C,F
NEW QUESTION 140
Which of the following tools would a penetration tester leverage to conduct OSINT? (Select TWO).
- A. Shodan
- B. Wireshark
- C. Maltego
- D. BeEF
- E. SET
- F. Dynamo
Answer: A,C
Explanation:
Explanation
References: https://resources.infosecinstitute.com/top-five-open-source-intelligence-osint-tools/#gref
NEW QUESTION 141
A penetration tester ran an Nmap scan against a target and received the following output:
Which of the following commands would be best for the penetration tester to execute NEXT to discover any weaknesses or vulnerabilities?
- A. onesixtyone -d 192.168.121.1
- B. enum4linux -w 192.168.121.1
- C. snmpwalk -c public 192.168.121.1
- D. medusa -h 192.168.121.1 -U users.txt -P passwords.txt -M ssh
Answer: C
NEW QUESTION 142
A tester has captured a NetNTLMv2 hash using Responder. Which of the following commands will allow the tester to crack the hash using a mask attack?
- A. hashcat -m 5600 -r rules/bestG4.rule hash.txt wordlist.txt
- B. hashcat -m 5600 hash.txt
- C. hashcat -m 5600 -a 3 hash.txt ?a?a?a?a?a?a?a?a
- D. hashcat -m 5600 -o results.text hash.txt wordlist.txt
Answer: C
NEW QUESTION 143
After several attempts, an attacker was able to gain unauthorized access through a biometrics sensor using the attacker's actual fingerprint without exploitation. Which of the following is the MOST likely explanation of what happened?
- A. The biometric device is configured more toward true negatives.
- B. The biometric device is tuned more toward false positives.
- C. The biometric device is set to fail closed.
- D. The biometric device duplicated a valid user's fingerprint.
Answer: B
NEW QUESTION 144
Which of the following CPU registers does the penetration tester need to overwrite in order to exploit a simple buffer overflow?
- A. Destination index register
- B. Index pointer register
- C. Stack base pointer
- D. Stack pointer register
Answer: D
Explanation:
Explanation/Reference:
Reference: http://www.informit.com/articles/article.aspx?p=704311&seqNum=3
NEW QUESTION 145
A penetration tester must assess a web service. Which of the following should the tester request during the scoping phase?
- A. After-hours contact escalation
- B. XSD
- C. WSDLfile
- D. SOAP project file
Answer: C
NEW QUESTION 146
Joe a penetration tester, was able to exploit a web application behind a firewall He is trying to get a reverse shell back to his machine but the firewall blocks the outgoing traffic Ports for which of the following should the security consultant use to have the HIGHEST chance to bypass the firewall?
- A. SMTP
- B. HTTP
- C. DNS
- D. FTP
Answer: B
NEW QUESTION 147
While reviewing logs, a web developer notices the following user input string in a field:
Which of the following types of attacks was done to the website?
- A. XSS injection
- B. Blind XSS
- C. Persistent XSS
- D. Reflected XSS
Answer: A
NEW QUESTION 148
While performing privilege escalation on a Windows 7 workstation, a penetration tester identifies a service that imports a DLL by name rather than an absolute path. To exploit this vulnerability, which of the following criteria must be met?
- A. Weak folder permissions of a directory in the DLL search path
- B. Write permissions in the C:\Windows\System32\imports directory
- C. Permissions not disabled in the DLL
- D. DLL not cryptographically signed by the vendor
Answer: A
Explanation:
Explanation/Reference: https://itm4n.github.io/windows-dll-hijacking-clarified/
NEW QUESTION 149
A penetration tester executes the following commands:
C:\>%userprofile%\jtr.exe
This program has been blocked by group policy
C:\> accesschk.exe -w -s -q -u Users C:\Windows
rw C:\Windows\Tracing
C:\>copy %userprofile%\jtr.exe C:\Windows\Tracing
C:\Windows\Tracing\jtr.exe
jtr version 3.2...
jtr>
Which of the following is a local host vulnerability that the attacker is exploiting?
- A. Insecure file permissions
- B. Application Whitelisting
- C. Shell escape
- D. Writable service
Answer: A
NEW QUESTION 150
Which of the following actions BEST matches a script kiddie's threat actor?
- A. Steal credit cards from the database and sell them in the deep web
- B. Deface the website of a company in search of retribution
- C. Install a rootkit to maintain access to the corporate network
- D. Exfiltrate network diagrams to perform lateral movement
Answer: A
NEW QUESTION 151
A penetration tester is testing a banking application and uncovers a vulnerability. The tester is logged in as a non-privileged user who should have no access to any data. Given the data below from the web interception proxy Request POST /Bank/Tax/RTSdocuments/ HTTP 1.1 Host: test.com Accept: text/html; application/xhtml+xml Referrer: https://www.test.com/Bank/Tax/RTSdocuments/ Cookie: PHPSESSIONID: ; Content-Type: application/form-data; Response
403 Forbidden
<tr>
<td> Error:</td></tr>
<tr><td> Insufficient Privileges to view the data. </td></tr>
Displaying 1-10 of 105 records
Which of the following types of vulnerabilities is being exploited?
- A. File upload vulnerability
- B. Cookie enumeration
- C. Parameter pollution vulnerability
- D. Forced browsing vulnerability
Answer: D
NEW QUESTION 152
A tester has captured a NetNTLMv2 hash using Responder Which of the following commands will allow the tester to crack the hash using a mask attack?
- A. hashcax -m 5600 hash.txt
- B. hashcat -m 5600 -r rulea/beat64.rule hash.txt wordliat.txt
- C. hashc&t -m 5600 -a 3 haah.txt ?a?a?a?a?a?a?a?a
- D. hashcat -m 5600 -o reaulta.txt hash.txt wordliat.txt
Answer: B
NEW QUESTION 153
......
CompTIA PT0-001 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
| Topic 9 |
|
| Topic 10 |
|
| Topic 11 |
|
| Topic 12 |
|
New PT0-001 Exam Dumps with High Passing Rate: https://freetorrent.braindumpsvce.com/PT0-001_exam-dumps-torrent.html