PT0-002 Exam Questions and Answers | Exam-Dumps.net (Page: 8)

QUESTION: 36

A penetration tester who is doing a security assessment discovers that a critical vulnerability is being actively exploited by cybercriminals.
Which of the following should the tester do NEXT?

Reach out to the primary point of contact.
Try to take down the attackers.
Call law enforcement officials immediately.
Collect the proper evidence and add to the final report.

Answer(s): A

Reveal Solution Next Question

QUESTION: 37

A penetration tester received a .pcap file to look for credentials to use in an engagement.
Which of the following tools should the tester utilize to open and read the .pcap file?

Nmap
Wireshark
Metasploit
Netcat

Answer(s): B

Reveal Solution Next Question

A penetration tester ran an Nmap scan on an Internet-facing network device with the -F option and found a few open ports. To further enumerate, the tester ran another scan using the following command: nmap -O -A -sS -p- 100.100.100.50
Nmap returned that all 65,535 ports were filtered
Which of the following MOST likely occurred on the second scan?

A firewall or IPS blocked the scan.
The penetration tester used unsupported flags.
The edge network device was disconnected.
The scan returned ICMP echo replies.

Answer(s): A

Reveal Solution Next Question

QUESTION: 39

A penetration tester is looking for a vulnerability that enables attackers to open doors via a specialized TCP service that is used for a physical access control system. The service exists on more than 100 different hosts, so the tester would like to automate the assessment. Identification requires the penetration tester to:
-Have a full TCP connection
-Send a `hello` payload
-Wait for a response
-Send a string of characters longer than 16 bytes
Which of the following approaches would BEST support the objective?

Run nmap -Pn -sV --script vuln <IP address>.
Employ an OpenVAS simple scan against the TCP port of the host.
Create a script in the Lua language and use it with NSE.
Perform a credentialed scan with Nessus.

Answer(s): C

Reveal Solution Next Question

QUESTION: 40

Performing a penetration test against an environment with SCADA devices brings an additional safety risk because the:

devices produce more heat and consume more power.
devices are obsolete and are no longer available for replacement.
protocols are more difficult to understand.
devices may cause physical world effects.

Answer(s): D

Reveal Solution Next Question

CompTIA PT0-002 Exam (page: 8)
CompTIA PenTest+ Certification
Updated on: 31-Aug-2025

QUESTION: 36

QUESTION: 37

QUESTION: 38

QUESTION: 39

QUESTION: 40

CompTIA PT0-002 Exam (page: 8) CompTIA PenTest+ Certification Updated on: 31-Aug-2025

QUESTION: 36

QUESTION: 37

QUESTION: 38

QUESTION: 39

QUESTION: 40

CompTIA PT0-002 Exam (page: 8)
CompTIA PenTest+ Certification
Updated on: 31-Aug-2025