CompTIA PenTest+ - PT0-003무료 덤프문제 풀어보기
A penetration tester exports the following CSV data from a scanner. The tester wants to parse the data using Bash and input it into another tool.
Which of the following will provide the intended output?
cat data.csv | grep -v "IP" | cut -d"," -f 3,4 | sed -e 's/,//'
Which of the following will provide the intended output?
cat data.csv | grep -v "IP" | cut -d"," -f 3,4 | sed -e 's/,//'
정답: A
설명: (Fast2test 회원만 볼 수 있음)
A penetration tester needs to enumerate domains, subdomains, and ports that belong to comptia.org. Which of the following tools will provide the most comprehensive information?
정답: B
설명: (Fast2test 회원만 볼 수 있음)
During a penetration test, a tester has confirmed stored XSS within a comment form on a site.
Which of the following payloads is required to exploit the vulnerability and provide a reverse shell against user browsers?
Which of the following payloads is required to exploit the vulnerability and provide a reverse shell against user browsers?
정답: B
설명: (Fast2test 회원만 볼 수 있음)
As part of an engagement, a penetration tester wants to maintain access to a compromised system after rebooting. Which of the following techniques would be best for the tester to use?
정답: D
설명: (Fast2test 회원만 볼 수 있음)
A penetration tester successfully phishes a user and compromises a domain-joined endpoint. The tester enumerates the domain controller and discovers that Group Policy Preferences are in use.
The tester also finds that the version of the domain controllers is Windows Server 2012. The tester wants to use the fastest possible method of pivoting successfully to multiple production servers joined to the domain. Which of the following is the best way to achieve this goal?
The tester also finds that the version of the domain controllers is Windows Server 2012. The tester wants to use the fastest possible method of pivoting successfully to multiple production servers joined to the domain. Which of the following is the best way to achieve this goal?
정답: D
설명: (Fast2test 회원만 볼 수 있음)
A penetration tester performs an assessment on the target company's Kubernetes cluster using kube- hunter. Which of the following types of vulnerabilities could be detected with the tool?
정답: C
설명: (Fast2test 회원만 볼 수 있음)
A penetration tester wants to collect a client's confidential information during an internal penetration test. Which of the following best meets the tester's objective?
정답: C
설명: (Fast2test 회원만 볼 수 있음)
A penetration tester would like to leverage a CSRF vulnerability to gather sensitive details from an application's end users. Which of the following tools should the tester use for this task?
정답: B
설명: (Fast2test 회원만 볼 수 있음)
Which of the following best describes the importance of including the attack steps in a penetration test report?
정답: A
설명: (Fast2test 회원만 볼 수 있음)
A penetration tester is ready to add shellcode for a specific remote executable exploit. The tester is trying to prevent the payload from being blocked by anti-malware that is running on the target.
Which of the following commands should the tester use to obtain shell access?
Which of the following commands should the tester use to obtain shell access?
정답: B
설명: (Fast2test 회원만 볼 수 있음)
While performing a red-team exercise, a penetration tester uses a reading device to extract data from an employee's access badge. The tester creates a copy for unauthorized entry. Which of the following best describes this attack?
정답: A
설명: (Fast2test 회원만 볼 수 있음)
During a REST API security assessment, a penetration tester was able to sniff JSON content containing user credentials. The JSON structure was as follows:
<
transaction_id: "1234S6", content: [ {
user_id: "mrcrowley", password: ["54321#"] b <
user_id: "ozzy",
password: ["1112228"] ) ]
Assuming that the variable json contains the parsed JSON data, which of the following Python code snippets correctly returns the password for the user ozzy?
<
transaction_id: "1234S6", content: [ {
user_id: "mrcrowley", password: ["54321#"] b <
user_id: "ozzy",
password: ["1112228"] ) ]
Assuming that the variable json contains the parsed JSON data, which of the following Python code snippets correctly returns the password for the user ozzy?
정답: D
설명: (Fast2test 회원만 볼 수 있음)