CompTIA PT0-001 Braindumps 2021

NEW QUESTION 1
After successfully capturing administrator credentials to a remote Windows machine, a penetration tester attempts to access the system using PSExec but is denied permission. Which of the following shares must be accessible for a successful PSExec connection?

• A. IPCS and C$
• B. C$ and ADMINS
• C. SERVICES and ADMINS
• D. ADMINS and IPCS

Answer: C

NEW QUESTION 2
A penetration tester has successfully explogted an application vulnerability and wants to remove the command history from the Linux session. Which of the following will accomplish this successfully?

• A. history --remove
• B. cat history I clear
• C. rm -f ./history
• D. history -c

Answer: D

NEW QUESTION 3
A tester has determined that null sessions are enabled on a domain controller. Which of the following attacks can be performed to leverage this vulnerability?

• A. RID cycling to enumerate users and groups
• B. Pass the hash to relay credentials
• C. Password brute forcing to log into the host
• D. Session hijacking to impersonate a system account

Answer: C

NEW QUESTION 4
An assessor begins an internal security test of the Windows domain internal. comptia. net. The assessor is given network access via DHCP, but is not given any network maps or target IP addresses. Which of the following commands can the assessor use to find any likely Windows domain controllers?

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: A

NEW QUESTION 5
During an internal penetration test, several multicast and broadcast name resolution requests are observed traversing the network. Which of the following tools could be used to impersonate network resources and collect authentication requests?

• A. Ettercap
• B. Tcpdump
• C. Responder
• D. Medusa

Answer: D

NEW QUESTION 6
A penetration tester ran the following Nmap scan on a computer nmap -sV 192.168.1.5
The organization said it had disabled Telnet from its environment However, the results of the Nmap scan show port 22 as closed and port 23 as open to SSH Which of the following is the BEST explanation for what happened?

• A. The organization failed to disable Telnet.
• B. Nmap results contain a false positive for port 23.
• C. Port 22 was filtered.
• D. The service is running on a non-standard por

Answer: A

NEW QUESTION 7
During an internal network penetration test, a tester recovers the NTLM password hash tor a user known to have full administrator privileges on a number of target systems Efforts to crack the hash and recover the plaintext password have been unsuccessful Which of the following would be the BEST target for continued explogtation efforts?

• A. Operating system Windows 7 Open ports: 23, 161
• B. Operating system Windows Server 2021 Open ports: 53, 5900
• C. Operating system Windows 8 1Open ports 445, 3389
• D. Operating system Windows 8 Open ports 514, 3389

Answer: C

NEW QUESTION 8
A penetration tester has a full shell to a domain controller and wants to discover any user account that has not authenticated to the domain in 21 days. Which of the following commands would BEST accomplish this?

• A. dsrm -users "DN=compony.com; OU=hq CN=usera"
• B. dsuser -name -account -limit 3
• C. dsquery uaer -inactive 3
• D. dsquery -o -rein -limit 21

Answer: B

NEW QUESTION 9
A penetration tester is designing a phishing campaign and wants to build list of users (or the target organization. Which of the following techniques would be the MOST appropriate? (Select TWO)

• A. Query an Internet WHOIS database.
• B. Search posted job listings.
• C. Scrape the company website.
• D. Harvest users from social networking sites.
• E. Socially engineer the corporate call cente

Answer: AB

NEW QUESTION 10
A tester has captured a NetNTLMv2 hash using Responder Which of the following commands will allow the tester to crack the hash using a mask attack?

• A. hashcat -m 5600 -r rulea/beat64.rule hash.txt wordliat.txt
• B. hashcax -m 5€00 hash.txt
• C. hashc&t -m 5600 -a 3 haah.txt ?a?a?a?a?a?a?a?a
• D. hashcat -m 5600 -o reaulta.txt hash.txt wordliat.txt

Answer: A

NEW QUESTION 11
A penetration tester has compromised a host. Which of the following would be the correct syntax to create a Netcat listener on the device?

• A. nc -lvp 4444 /bin/bash
• B. nc -vp 4444 /bin/bash
• C. nc -p 4444 /bin/bash
• D. nc -lp 4444 -e /bin/bash

Answer: D

NEW QUESTION 12
A penetration tester has been asked to conduct OS fingerprinting with Nmap using a companyprovide text file that contain a list of IP addresses.
Which of the following are needed to conduct this scan? (Select TWO).

• A. -O
• B. _iL
• C. _sV
• D. -sS
• E. -oN
• F. -oX

Answer: EF

NEW QUESTION 13
A penetration tester is performing a remote scan to determine if the server farm is compliant with the company's software baseline . Which of the following should the penetration tester perform to verify compliance with the baseline?

• A. Discovery scan
• B. Stealth scan
• C. Full scan
• D. Credentialed scan

Answer: A

NEW QUESTION 14
A penetration tester runs the following from a compromised box 'python -c -import pty;Pty.sPawn( "/bin/bash").' Which of the following actions is the tester taking?

• A. Removing the Bash history
• B. Upgrading the shell
• C. Creating a sandbox
• D. Capturing credentials

Answer: A

NEW QUESTION 15
An attacker uses SET to make a copy of a company's cloud-hosted web mail portal and sends an email m to obtain the CEO s login credentials Which of the following types of attacks is this an example of?

• A. Elicitation attack
• B. Impersonation attack
• C. Spear phishing attack
• D. Drive-by download attack

Answer: B

NEW QUESTION 16
The results of a basic compliance scan show a subset of assets on a network. This data differs from what is shown on the network architecture diagram, which was supplied at the beginning of the test. Which of the following are the MOST likely causes for this difference? (Select TWO)

• A. Storage access
• B. Limited network access
• C. Misconfigured DHCP server
• D. Incorrect credentials
• E. Network access controls

Answer: A

NEW QUESTION 17
A security analyst has uncovered a suspicious request in the logs for a web application. Given the following URL:

• A. Directory traversal
• B. Cross-site scripting
• C. Remote file inclusion
• D. User enumeration

Answer: D