Free CompTIA PT0-001 Exam Dumps Questions & Answers

A penetration tester needs to provide the code used to exploit a DNS server in the final report. In which of the following parts of the report should the penetration tester place the code?

• A.  Technical summary
• B.  Conclusion
• C.  Executive summary
• D.  Remediation

Which of the following is the BEST initial attack against an identified FTP server on the remote network?

• A.  Use a MITM to sniff transferred credentials in cleartext.
• B.  Perform a dictionary attack.
• C.  Perform fuzzing against a username field.
• D.  Attempt to log in as anonymous.

During an engagement, a consultant identifies a number of areas that need further investigation and require an extension of the engagement. Which of the following is the MOST likely reason why the engagement may not be able to continue?

• A.  The company did not properly scope the project.
• B.  The initial findings were not communicated to senior leadership.
• C.  The consultant did not sign an NDA.
• D.  The consultant was not provided with the appropriate testing tools.

After establishing a shell on a target system, Joe, a penetration tester is aware that his actions have not been detected. He now wants to maintain persistent access to the machine. Which of the following methods would be MOST easily detected?

• A.  Obtain cleartext credentials of the compromised user.
• B.  Modify a known boot time service to instantiate a call back.
• C.  Run a zero-day exploit.
• D.  Create a new domain user with a known password.

A penetration tester observes that the content security policy header is missing during a web application penetration test. Which of the following techniques would the penetration tester MOST likely perform?

• A.  Command injection attack
• B.  Directory traversal attack
• C.  Remote file inclusion attack
• D.  Clickjacking attack