PT0-002 Exam Questions and Answers | Exam-Dumps.net (Page: 9)

QUESTION: 41

A penetration tester has been given an assignment to attack a series of targets in the 192.168.1.0/24 range, triggering as few alarms and countermeasures as possible.
Which of the following Nmap scan syntaxes would BEST accomplish this objective?

nmap -sT -vvv -O 192.168.1.2/24 -PO
nmap -sV 192.168.1.2/24 -PO
nmap -sA -v -O 192.168.1.2/24
nmap -sS -O 192.168.1.2/24 -T1

Answer(s): D

Reference:

https://nmap.org/book/man-port-scanning-techniques.html

Reveal Solution Next Question

QUESTION: 42

A penetration tester has gained access to a network device that has a previously unknown IP range on an interface. Further research determines this is an always-on VPN tunnel to a third-party supplier.
Which of the following is the BEST action for the penetration tester to take?

Utilize the tunnel as a means of pivoting to other internal devices.
Disregard the IP range, as it is out of scope.
Stop the assessment and inform the emergency contact.
Scan the IP range for additional systems to exploit.

Answer(s): C

Reveal Solution Next Question

QUESTION: 43

A penetration tester recently performed a social-engineering attack in which the tester found an employee of the target company at a local coffee shop and over time built a relationship with the employee. On the employee's birthday, the tester gave the employee an external hard drive as a gift.
Which of the following social-engineering attacks was the tester utilizing?

Phishing
Tailgating
Baiting
Shoulder surfing

Answer(s): C

Reference:

https://phoenixnap.com/blog/what-is-social-engineering-types-of-threats

Reveal Solution Next Question

QUESTION: 44

A security company has been contracted to perform a scoped insider-threat assessment to try to gain access to the human resources server that houses PII and salary data. The penetration testers have been given an internal network starting position.
Which of the following actions, if performed, would be ethical within the scope of the assessment?

Exploiting a configuration weakness in the SQL database
Intercepting outbound TLS traffic
Gaining access to hosts by injecting malware into the enterprise-wide update server
Leveraging a vulnerability on the internal CA to issue fraudulent client certificates
Establishing and maintaining persistence on the domain controller

Answer(s): A

Reveal Solution Next Question

QUESTION: 45

A penetration tester is able to capture the NTLM challenge-response traffic between a client and a server.
Which of the following can be done with the pcap to gain access to the server?

Perform vertical privilege escalation.
Replay the captured traffic to the server to recreate the session.
Use John the Ripper to crack the password.
Utilize a pass-the-hash attack.

Answer(s): D

Reveal Solution Next Question

CompTIA PT0-002 Exam (page: 9) CompTIA PenTest+ Certification Updated on: 31-Aug-2025

QUESTION: 41

Reference:

QUESTION: 42

QUESTION: 43

Reference:

QUESTION: 44

QUESTION: 45

CompTIA PT0-002 Exam (page: 9)
CompTIA PenTest+ Certification
Updated on: 31-Aug-2025