Guaranteed Success in CompTIA PenTest+ PT0-002 Exam Dumps [Q132-Q149]

Rate this post

Guaranteed Success in CompTIA PenTest+ PT0-002 Exam Dumps

CompTIA PT0-002 Daily Practice Exam New 2025 Updated 460 Questions

CompTIA PenTest+ exam is intended for professionals who have a minimum of three years of experience in an IT-related role, with a focus on security. CompTIA PenTest+ Certification certification exam validates the skills required for effective penetration testing and can increase employability in the IT security job market. The PT0-002 exam covers topics such as planning and scoping, reconnaissance, vulnerability identification, exploiting vulnerabilities, post-exploitation techniques, and reporting and communication. Certified professionals can demonstrate to employers that they have the knowledge and skills required to protect systems and networks from cyber threats.

CompTIA PT0-002 Exam is very important because it ensures that a professional is knowledgeable and skilled in the critical area of cybersecurity. With the current state of cyber threats, it is essential for professionals to be well equipped with the necessary skills and knowledge to detect and prevent cyber attacks on their networks. PT0-002 exam is an excellent way to prove a candidate’s expertise in identifying and stopping such threats.

QUESTION 132
A penetration tester executes the following Nmap command and obtains the following output:

Which of the following commands would best help the penetration tester discover an exploitable service?
A)

B)

C)

D)

nmap -v -p 25 — soript smtp-enum-users remotehost

nmap -v — script=mysql-info.nse remotehost

nmap –ocript=omb-brute.noe remotehoat

nmap -p 3306 — script “http*vuln*” remotehost

QUESTION 133
A penetration tester downloaded a Java application file from a compromised web server and identifies how to invoke it by looking at the following log:

Which of the following is the order of steps the penetration tester needs to follow to validate whether the Java application uses encryption over sockets?

Run an application vulnerability scan and then identify the TCP ports used by the application.

Run the application attached to a debugger and then review the application’s log.

Disassemble the binary code and then identify the break points.

Start a packet capture with Wireshark and then run the application.

QUESTION 134
The results of an Nmap scan are as follows:
Starting Nmap 7.80 ( https://nmap.org ) at 2021-01-24 01:10 EST
Nmap scan report for ( 10.2.1.22 )
Host is up (0.0102s latency).
Not shown: 998 filtered ports
Port State Service
80/tcp open http
|_http-title: 80F 22% RH 1009.1MB (text/html)
|_http-slowloris-check:
| VULNERABLE:
| Slowloris DoS Attack
| <..>
Device type: bridge|general purpose
Running (JUST GUESSING) : QEMU (95%)
OS CPE: cpe:/a:qemu:qemu
No exact OS matches found for host (test conditions non-ideal).
OS detection performed. Please report any incorrect results at https://nmap.org/submit/.
Nmap done: 1 IP address (1 host up) scanned in 107.45 seconds
Which of the following device types will MOST likely have a similar response? (Choose two.)

Network device

Public-facing web server

Active Directory domain controller

IoT/embedded device

Exposed RDP

Print queue

QUESTION 135
A penetration tester conducted a discovery scan that generated the following:

Which of the following commands generated the results above and will transform them into a list of active hosts for further analysis?

nmap -oG list.txt 192.168.0.1-254 , sort

nmap -sn 192.168.0.1-254 , grep “Nmap scan” | awk ‘{print S5}’

nmap –open 192.168.0.1-254, uniq

nmap -o 192.168.0.1-254, cut -f 2

QUESTION 136
A penetration tester has completed an analysis of the various software products produced by the company under assessment. The tester found that over the past several years the company has been including vulnerable third-party modules in multiple products, even though the quality of the organic code being developed is very good. Which of the following recommendations should the penetration tester include in the report?

Add a dependency checker into the tool chain.

Perform routine static and dynamic analysis of committed code.

Validate API security settings before deployment.

Perform fuzz testing of compiled binaries.

QUESTION 137
A penetration tester wrote the following script to be used in one engagement:

Which of the following actions will this script perform?

Look for open ports.

Listen for a reverse shell.

Attempt to flood open ports.

Create an encrypted tunnel.

QUESTION 138
A penetration tester created the following script to use in an engagement:

However, the tester is receiving the following error when trying to run the script:

Which of the following is the reason for the error?

The sys variable was not defined.

The argv variable was not defined.

The sys module was not imported.

The argv module was not imported.

QUESTION 139
A penetration tester captured the following traffic during a web-application test:

Which of the following methods should the tester use to visualize the authorization information being transmitted?

Decode the authorization header using UTF-8.

Decrypt the authorization header using bcrypt.

Decode the authorization header using Base64.

Decrypt the authorization header using AES.

QUESTION 140
Given the following code:Which of the following data structures is systems?

A tuple

A tree

An array

A dictionary

QUESTION 141
A penetration tester wants to accomplish ARP poisoning as part of an attack. Which of the following tools will the tester most likely utilize?

Wireshark

Netcat

Nmap

Ettercap

QUESTION 142
A penetration tester created the following script to use in an engagement:

However, the tester is receiving the following error when trying to run the script:

Which of the following is the reason for the error?

The sys variable was not defined.

The argv variable was not defined.

The sys module was not imported.

The argv module was not imported.

QUESTION 143
A penetration tester has been hired to examine a website for flaws. During one of the time windows for testing, a network engineer notices a flood of GET requests to the web server, reducing the website’s response time by 80%. The network engineer contacts the penetration tester to determine if these GET requests are part of the test. Which of the following BEST describes the purpose of checking with the penetration tester?

Situational awareness

Rescheduling

DDoS defense

Deconfliction

QUESTION 144
A penetration tester exploited a vulnerability on a server and remotely ran a payload to gain a shell. However, a connection was not established, and no errors were shown on the payload execution. The penetration tester suspected that a network device, like an IPS or next-generation firewall, was dropping the connection. Which of the following payloads are MOST likely to establish a shell successfully?

windows/x64/meterpreter/reverse_tcp

windows/x64/meterpreter/reverse_http

windows/x64/shell_reverse_tcp

windows/x64/powershell_reverse_tcp

windows/x64/meterpreter/reverse_https

QUESTION 145
A penetration tester joins the assessment team in the middle of the assessment. The client has asked the team, both verbally and in the scoping document, not to test the production networks. However, the new tester is not aware of this request and proceeds to perform exploits in the production environment. Which of the following would have MOST effectively prevented this misunderstanding?

Prohibiting exploitation in the production environment

Requiring all testers to review the scoping document carefully

Never assessing the production networks

Prohibiting testers from joining the team during the assessment

QUESTION 146
A penetration tester wrote the following Bash script to brute force a local service password:
..ting as expected. Which of the following changes should the penetration tester make to get the script to work?

..echo “The correct password is $p” && break)
ho “The correct password is $p” I| break

.echo “The correct password is $p” && break)
o “The correct password is $p” I break

echo “The correct password is Sp” && break)
echo “The correct password is $p” && break)

.{ echo “The correct password is $p” && break )
With
I| ( echo “The correct password is $p” && break )

QUESTION 147
Which of the following should a penetration tester consider FIRST when engaging in a penetration test in a cloud environment?

Whether the cloud service provider allows the penetration tester to test the environment

Whether the specific cloud services are being used by the application

The geographical location where the cloud services are running

Whether the country where the cloud service is based has any impeding laws

QUESTION 148
Which of the following should a penetration tester attack to gain control of the state in the HTTP protocol after the user is logged in?

HTTPS communication

Public and private keys

Password encryption

Sessions and cookies

QUESTION 149
Penetration-testing activities have concluded, and the initial findings have been reviewed with the client. Which of the following best describes the NEXT step in the engagement?

Acceptance by the client and sign-off on the final report

Scheduling of follow-up actions and retesting

Attestation of findings and delivery of the report

Review of the lessons learned during the engagement