PenTest+ Exam Questions PDF download - Page: 12

QUESTION: 16

A security professional wants to test an IoT device by sending an invalid packet to a proprietary service listening on TCP port 3011.
Which of the following would allow the security professional to easily and programmatically manipulate the TCP header length and checksum using arbitrary numbers and to observe how the proprietary service responds?

Nmap
tcpdump
Scapy
hping3

Answer(s): A

Reference:

https://www.mn.uio.no/i /english/research/groups/psy/completedmasters/2017/Kim_Jonatan_Wessel_Bjorneset/ kim_jonatan_wessel_bjorneset_testing_security_for_internet_of_things_a_survey_on_vulnerabilities_in_ip_cameras.pdf (24)

Reveal Solution Next Question

QUESTION: 17

A penetration tester is reviewing the following SOW prior to engaging with a client:
`Network diagrams, logical and physical asset inventory, and employees' names are to be treated as client con dential. Upon completion of the engagement, the penetration tester will submit ndings to the client's Chief Information Security O cer (CISO) via encrypted protocols and subsequently dispose of all ndings by erasing them in a secure manner.`
Based on the information in the SOW, which of the following behaviors would be considered unethical? (Choose two.)

Utilizing proprietary penetration-testing tools that are not available to the public or to the client for auditing and inspection
Utilizing public-key cryptography to ensure ndings are delivered to the CISO upon completion of the engagement
Failing to share with the client critical vulnerabilities that exist within the client architecture to appease the client's senior leadership team
Seeking help with the engagement in underground hacker forums by sharing the client's public IP address
Using a software-based erase tool to wipe the client's ndings from the penetration tester's laptop
Retaining the SOW within the penetration tester's company for future use so the sales team can plan future engagements

Answer(s): C,E

Reveal Solution Next Question

QUESTION: 18

A company recruited a penetration tester to con gure wireless IDS over the network.
Which of the following tools would BEST test the effectiveness of the wireless
IDS solutions?

Aircrack-ng
Wireshark
Wi te
Kismet

Answer(s): A

Reference:

https://purplesec.us/perform-wireless-penetration-test/

Reveal Solution Next Question

QUESTION: 19

A penetration tester gains access to a system and establishes persistence, and then runs the following commands: cat /dev/null > temp touch `"r .bash_history temp mv temp .bash_history
Which of the following actions is the tester MOST likely performing?

Redirecting Bash history to /dev/null
Making a copy of the user's Bash history for further enumeration
Covering tracks by clearing the Bash history
Making decoy les on the system to confuse incident responders

Answer(s): C

Reference:

https://null-byte.wonderhowto.com/how-to/clear-logs-bash-history-hacked-linux-systems-cover-your-tracks-remain-undetected-0244768/

Reveal Solution Next Question

QUESTION: 20

Which of the following web-application security risks are part of the OWASP Top 10 v2017? (Choose two.)

Buffer over ows
Cross-site scripting
Race-condition attacks
Zero-day attacks
Injection aws
Ransomware attacks

Answer(s): A,B

Reference:

https://owasp.org/www-pdf-archive/OWASP_Top_10_2017_RC2_Final.pdf

Reveal Solution Next Question

CompTIA PenTest+ PT1-002 Dumps in PDF

Free CompTIA PT1-002 Real Questions (page: 12)

QUESTION: 16

Reference:

QUESTION: 17

QUESTION: 18

Reference:

QUESTION: 19

Reference:

QUESTION: 20

Reference: