CompTIA PT0-003 Actual Free Exam Questions & Community Discussion
A tester obtains access to an application server via a Java vulnerability and must maintain persistence. The server has a file integrity monitoring control enabled, and the tester cannot disable it. Which of the following actions should the tester take to establish persistence?
Correct Answer: C
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
A penetration tester has been asked to conduct a blind web application test against a customer's corporate website. Which of the following tools would be best suited to perform this assessment?
Correct Answer: D
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
A penetration tester needs to launch an Nmap scan to find the state of the port for both TCP and UDP services. Which of the following commands should the tester use?
Correct Answer: D
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
During an assessment, a penetration tester runs the following command:
setspn.exe -Q /
Which of the following attacks is the penetration tester preparing for?
setspn.exe -Q /
Which of the following attacks is the penetration tester preparing for?
Correct Answer: B
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
A penetration tester is searching for vulnerabilities or misconfigurations on a container environment. Which of the following tools will the tester most likely use to achieve this objective?
Correct Answer: D
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
A penetration tester is enumerating a Linux system. The goal is to modify the following script to provide more comprehensive system information:
#!/bin/bash
ps aux >> linux_enum.txt
Which of the following lines would provide the most comprehensive enumeration of the system?
cat /etc/passwd >> linux_enum.txt
#!/bin/bash
ps aux >> linux_enum.txt
Which of the following lines would provide the most comprehensive enumeration of the system?
cat /etc/passwd >> linux_enum.txt
Correct Answer: C
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
A tester conducts a web application penetration test and discovers a hidden diagnostics page.
The hidden diagnostics page allows a user to ping other systems and test connectivity. Which of the following payloads is best suited to test this function?
The hidden diagnostics page allows a user to ping other systems and test connectivity. Which of the following payloads is best suited to test this function?
Correct Answer: B
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
A penetration tester reviews a SAST vulnerability scan report. The following vulnerability has been reported as high severity:
The tester inspects the source file and finds the variable responseis defined as a constant and is not referred to or used in other sections of the code. Which of the following describes how the tester should classify this reported vulnerability?
The tester inspects the source file and finds the variable responseis defined as a constant and is not referred to or used in other sections of the code. Which of the following describes how the tester should classify this reported vulnerability?
Correct Answer: A
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Which of the following is a term used to describe a situation in which a penetration tester bypasses physical access controls and gains access to a facility by entering at the same time as an employee?
Correct Answer: D
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
A tester infiltrates the internal network 10.10.0.0/22 and wants to discover hosts for further engagement activities. The tester tries to use the pingcommand to discover hosts, but no hosts on the network reply. The tester then uses the following command to discover hosts:
nmap -Pn -sS -p161 10.10.0.0/22
Which of the following best describes what the tester is attempting to do?
nmap -Pn -sS -p161 10.10.0.0/22
Which of the following best describes what the tester is attempting to do?
Correct Answer: C
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
A penetration tester exports the following CSV data from a scanner. The tester wants to parse the data using Bash and input it into another tool.
Which of the following will provide the intended output?
cat data.csv | grep -v "IP" | cut -d"," -f 3,4 | sed -e 's/,//'
Which of the following will provide the intended output?
cat data.csv | grep -v "IP" | cut -d"," -f 3,4 | sed -e 's/,//'
Correct Answer: A
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Which of the following authorizations is mandatory when a penetration tester is involved in a complex IT infrastructure?
Correct Answer: D
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
0
0
0
10