Practice PT0-002 Exam Online

Question 1

A penetration tester is conducting a penetration test. The tester obtains a root-level shell on a Linux server and

discovers the following data in a file named password.txt in the /home/svsacct directory:

U3VQZXIkM2NyZXQhCg==

Which of the following commands should the tester use NEXT to decode the contents of the file?

A :

echo U3VQZXIkM2NyZXQhCg== | base64 –d

B : tar zxvf password.txt

C : hydra –l svsacct –p U3VQZXIkM2NyZXQhCg== ssh://192.168.1.0/24

D : john --wordlist /usr/share/seclists/rockyou.txt password.txt

Answer: A

Question 2

Which of the following documents must be signed between the penetration tester and the client to govern how

any provided information is managed before, during, and after the engagement?

A : MSA

B : NDA

C : SOW

D : ROE

Answer: B

Question 3

In the statement of work (SOW) document, the scope of work defines which of the following?

A : Pentest findings

B : Reason for the pentest

C : Pentest artifacts

D : Work activities to be completed

Answer: D

Question 4

A client evaluating a penetration testing company requests examples of its work. Which of the following represents the BEST course of action for the penetration testers?

A : Redact identifying information and provide a previous customer's documentation.

B : Allow the client to only view the information while in secure spaces.

C : Determine which reports are no longer under a period of confidentiality.

D : Provide raw output from penetration testing tools.

Answer: C

Question 5

A software company has hired a security consultant to assess the security of the company’s software

development practices. The consultant opts to begin reconnaissance by performing fuzzing on a software

binary. Which of the following vulnerabilities is the security consultant MOST likely to identify?

A : Weak authentication schemes

B : Credentials stored in strings

C : Buffer overflows

D : Non-optimized resource management

Answer: C

Name:	CompTIA PenTest+
Exam Code:	PT0-002
Certification:	CompTIA PenTest
Vendor:	CompTIA
Total Questions:	696
Last Updated:	Apr 23, 2024

CompTIA PT0-002