Passcerty.com » CompTIA » CompTIA PenTest+ » PT0-001

PT0-001 Exam Questions & Answers

Exam Code: PT0-001

Exam Name: CompTIA PenTest+ Exam

Updated: Apr 01, 2024

Q&As: 306

At Passcerty.com, we pride ourselves on the comprehensive nature of our PT0-001 exam dumps, designed meticulously to encompass all key topics and nuances you might encounter during the real examination. Regular updates are a cornerstone of our service, ensuring that our dedicated users always have their hands on the most recent and relevant Q&A dumps. Behind every meticulously curated question and answer lies the hard work of our seasoned team of experts, who bring years of experience and knowledge into crafting these premium materials. And while we are invested in offering top-notch content, we also believe in empowering our community. As a token of our commitment to your success, we're delighted to offer a substantial portion of our resources for free practice. We invite you to make the most of the following content, and wish you every success in your endeavors.


Download Free CompTIA PT0-001 Demo

Experience Passcerty.com exam material in PDF version.
Simply submit your e-mail address below to get started with our PDF real exam demo of your CompTIA PT0-001 exam.

Instant download
Latest update demo according to real exam

*Email Address

* Our demo shows only a few questions from your selected exam for evaluating purposes

Free CompTIA PT0-001 Dumps

Practice These Free Questions and Answers to Pass the CompTIA PenTest+ Exam

Questions 1

A security assessor completed a comprehensive penetration test of a company and its networks and systems.

During the assessment, the tester identified a vulnerability in the crypto library used for TLS on the company's intranet-wide payroll web application. However, the vulnerability has not yet been patched by the vendor, although a patch is expected within days. Which of the following strategies would BEST mitigate the risk of impact?

A. Modify the web server crypto configuration to use a stronger cipher-suite for encryption, hashing, and digital signing.

B. Implement new training to be aware of the risks in accessing the application. This training can be decommissioned after the vulnerability is patched.

C. Implement an ACL to restrict access to the application exclusively to the finance department. Reopen the application to company staff after the vulnerability is patched.

D. Require payroll users to change the passwords used to authenticate to the application. Following the patching of the vulnerability, implement another required password change.

Show Answer
Questions 2

A penetration tester is exploiting the use of default public and private community strings Which of the following protocols is being exploited?

A. SMTP

B. DNS

C. SNMP

D. HTTP

Show Answer
Questions 3

Which of the following is an important stakeholder to notify when penetration testing has begun?

A. System owner

B. Remediation manager

C. Compliance assessor

D. Patching team

Show Answer
Questions 4

A penetration tester reported the following vulnerabilities:

Which of the following is the correct order to rate the vulnerabilities from critical to low considering the MOST immediate impact?

A. Unrestricted file upload, stored XSS, SQL injection, verbose server headers

B. SQL injection, unrestricted file upload, stored XSS, verbose server headers

C. Verbose server headers, unrestricted file upload, stored XSS, SQL injection

D. Stored XSS, SQL injection, unrestricted file upload, verbose server headers

Show Answer
Questions 5

Given the following Python code:

a = 'abcdefghijklmnop'a[::2]

Which of the following will result?

A. adgjmp

B. pnlhfdb

C. acegikmo

D. ab

Show Answer More Questions

Viewing Page 3 of 3 pages. Download PDF or Software version with 306 questions

<123

Related ExamsRelated Certifications