최신CompTIA PenTest+ - PT0-003무료샘플문제
문제1
A penetration tester uses a Python script to enumerate open ports across a list of IP addresses.
The current script runs sequentially, which slows it down during larger engagements. The tester wants to improve the script's performance so it can handle multiple targets simultaneously.
Which of the following changes is the best way to achieve this goal?
A penetration tester uses a Python script to enumerate open ports across a list of IP addresses.
The current script runs sequentially, which slows it down during larger engagements. The tester wants to improve the script's performance so it can handle multiple targets simultaneously.
Which of the following changes is the best way to achieve this goal?
정답: A
설명: (ITDumpsKR 회원만 볼 수 있음)
문제2
A penetration tester was able to gain access to a plaintext file on a user workstation. Upon opening the file, the tester notices some strings of randomly generated text. The tester is able to use these strings to move laterally throughout the network by accessing the fileshare on a web application. Which of the following should the organization do to remediate the issue?
A penetration tester was able to gain access to a plaintext file on a user workstation. Upon opening the file, the tester notices some strings of randomly generated text. The tester is able to use these strings to move laterally throughout the network by accessing the fileshare on a web application. Which of the following should the organization do to remediate the issue?
정답: C
설명: (ITDumpsKR 회원만 볼 수 있음)
문제3
A penetration tester needs to identify all vulnerable input fields on a customer website. Which of the following tools would be best suited to complete this request?
A penetration tester needs to identify all vulnerable input fields on a customer website. Which of the following tools would be best suited to complete this request?
정답: A
설명: (ITDumpsKR 회원만 볼 수 있음)
문제4
Which of the following is most important when communicating the need for vulnerability remediation to a client at the conclusion of a penetration test?
Which of the following is most important when communicating the need for vulnerability remediation to a client at the conclusion of a penetration test?
정답: C
설명: (ITDumpsKR 회원만 볼 수 있음)
문제5
During an assessment, a penetration tester sends the following request:
POST /services/v1/users/create HTTP/1.1
Host: target-application.com
Content-Type: application/json
Content-Length: [dynamic]
Authorization: Bearer [FUZZE]
Which of the following attacks is the penetration tester performing?
During an assessment, a penetration tester sends the following request:
POST /services/v1/users/create HTTP/1.1
Host: target-application.com
Content-Type: application/json
Content-Length: [dynamic]
Authorization: Bearer [FUZZE]
Which of the following attacks is the penetration tester performing?
정답: A
설명: (ITDumpsKR 회원만 볼 수 있음)
문제6
Which of the following techniques is the best way to avoid detection by Data Loss Prevention (DLP) tools?
Which of the following techniques is the best way to avoid detection by Data Loss Prevention (DLP) tools?
정답: D
설명: (ITDumpsKR 회원만 볼 수 있음)
문제7
A penetration tester is performing a wireless assessment that is focused on accessing sensitive information. Which of the following is the best way for the tester to accomplish this task from a nearby coffee shop?
A penetration tester is performing a wireless assessment that is focused on accessing sensitive information. Which of the following is the best way for the tester to accomplish this task from a nearby coffee shop?
정답: B
설명: (ITDumpsKR 회원만 볼 수 있음)
문제8
Which of the following is necessary during preengagement activities to proceed with an engagement?
Which of the following is necessary during preengagement activities to proceed with an engagement?
정답: B
설명: (ITDumpsKR 회원만 볼 수 있음)
문제9
A penetration tester finds that an application responds with the contents of the /etc/passwdfile when the following payload is sent:
Which of the following should the tester recommend in the report to best prevent this type of vulnerability?
A penetration tester finds that an application responds with the contents of the /etc/passwdfile when the following payload is sent:
Which of the following should the tester recommend in the report to best prevent this type of vulnerability?
정답: B
설명: (ITDumpsKR 회원만 볼 수 있음)
문제10
A penetration tester compromises a developer's workstation and believes the individual may have access to Amazon cloud compute resources. Which of the following commands is least likely to trigger SOC detections to confirm access?
A penetration tester compromises a developer's workstation and believes the individual may have access to Amazon cloud compute resources. Which of the following commands is least likely to trigger SOC detections to confirm access?
정답: B
설명: (ITDumpsKR 회원만 볼 수 있음)
문제11
During an engagement, a penetration tester needs to break the key for the Wi-Fi network that uses WPA2 encryption. Which of the following attacks would accomplish this objective?
During an engagement, a penetration tester needs to break the key for the Wi-Fi network that uses WPA2 encryption. Which of the following attacks would accomplish this objective?
정답: A
설명: (ITDumpsKR 회원만 볼 수 있음)
문제12
During a security assessment, a penetration tester gains access to an internal server and manipulates some data to hide its presence. Which of the following is the best way for the penetration tester to hide the activities performed?
During a security assessment, a penetration tester gains access to an internal server and manipulates some data to hide its presence. Which of the following is the best way for the penetration tester to hide the activities performed?
정답: A
설명: (ITDumpsKR 회원만 볼 수 있음)
문제13
A penetration tester identifies the URL for an internal administration application while following DevOps team members on their commutes. Which of the following attacks did the penetration tester most likely use?
A penetration tester identifies the URL for an internal administration application while following DevOps team members on their commutes. Which of the following attacks did the penetration tester most likely use?
정답: C
설명: (ITDumpsKR 회원만 볼 수 있음)