最新的CompTIA PenTest+ - PT0-003免費考試真題
問題1
A tester completed a report for a new client. Prior to sharing the report with the client, which of the following should the tester request to complete a review?
正確答案: C
說明：（僅 VCESoft 成員可見）
問題2
During a routine penetration test, the client's security team observes logging alerts that indicate several ID badges were reprinted after working hours without the appropriate authorization.
Which of the following is the penetration tester most likely trying to do?
Which of the following is the penetration tester most likely trying to do?
正確答案: C
說明：（僅 VCESoft 成員可見）
問題3
A penetration tester creates the following Python script that can be used to enumerate information about email accounts on a target mail server:
Which of the following logic constructs would permit the script to continue despite failure?
Which of the following logic constructs would permit the script to continue despite failure?
正確答案: D
說明：（僅 VCESoft 成員可見）
問題4
A penetration tester needs to scan a remote infrastructure with Nmap. The tester issues the following command:
nmap 10.10.1.0/24
Which of the following is the number of TCP ports that will be scanned?
nmap 10.10.1.0/24
Which of the following is the number of TCP ports that will be scanned?
正確答案: B
說明：（僅 VCESoft 成員可見）
問題5
A company hires a penetration tester to perform an external attack surface review as part of a security engagement. The company informs the tester that the main company domain to investigate is comptia.org. Which of the following should the tester do to accomplish the assessment objective?
正確答案: B
說明：（僅 VCESoft 成員可見）
問題6
Which of the following are the most important considerations when using generative AI to assist in writing a penetration testing report? (Choose two.)
正確答案: E,F
問題7
A penetration tester is performing a network security assessment. The tester wants to intercept communication between two users and then view and potentially modify transmitted data. Which of the following types of on-path attacks would be best to allow the penetration tester to achieve this result?
正確答案: D
說明：（僅 VCESoft 成員可見）
問題8
During a penetration test, the tester configures a backdoor to maintain access to a compromised system. In addition, the tester keeps a time card on the desktop of the compromised host. Which of the following is the most important activity for the tester to perform after the engagement concludes?
正確答案: A
說明：（僅 VCESoft 成員可見）
問題9
During a penetration test, a tester attempts to pivot from one Windows 10 system to another Windows system. The penetration tester thinks a local firewall is blocking connections. Which of the following command-line utilities built into Windows is most likely to disable the firewall?
正確答案: C
說明：（僅 VCESoft 成員可見）
問題10
An internal penetration tester is on site assessing network access for company-owned mobile devices. Which of the following would be the best tool to identify the available networks?
正確答案: B
說明：（僅 VCESoft 成員可見）
問題11
A penetration tester uses the Intruder tool from the Burp Suite Community Edition while assessing a web application. The tester notices the test is taking too long to complete.
Which of the following tools can the tester use to accelerate the test and achieve similar results?
Which of the following tools can the tester use to accelerate the test and achieve similar results?
正確答案: D
說明：（僅 VCESoft 成員可見）
問題12
After exploiting a vulnerability in an insecure service to gain access to a Linux system, a penetration tester executes the following commands:
sudo -l
route
netstat -a
last
who
Which of the following best describes the tester's purpose for running these commands?
sudo -l
route
netstat -a
last
who
Which of the following best describes the tester's purpose for running these commands?
正確答案: D
說明：（僅 VCESoft 成員可見）
問題13
A penetration tester is conducting an on-site review and wants to capture SSO credentials for staff in a specific department. Which of the following attack types would be most effective for this task?
正確答案: C
說明：（僅 VCESoft 成員可見）
問題14
During an external penetration test, a tester receives the following output from a tool:
test.comptia.org
info.comptia.org
vpn.comptia.org
exam.comptia.org
Which of the following commands did the tester most likely run to get these results?
test.comptia.org
info.comptia.org
vpn.comptia.org
exam.comptia.org
Which of the following commands did the tester most likely run to get these results?
正確答案: B
說明：（僅 VCESoft 成員可見）
