Free Access CompTIA PT0-002 New Release

Page: 11 / 29

Question 44

During a penetration test, you gain access to a system with a limited user interface. This machine appears to have access to an isolated network that you would like to port scan.

INSTRUCTIONS

Analyze the code segments to determine which sections are needed to complete a port scanning script.

Drag the appropriate elements into the correct locations to complete the script.

If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Options:

Question 45

An Nmap scan shows open ports on web servers and databases. A penetration tester decides to run WPScan and SQLmap to identify vulnerabilities and additional information about those systems.

Which of the following is the penetration tester trying to accomplish?

Options:

Uncover potential criminal activity based on the evidence gathered.

Identify all the vulnerabilities in the environment.

Limit invasiveness based on scope.

Maintain confidentiality of the findings.

Question 46

A security engineer identified a new server on the network and wants to scan the host to determine if it is running an approved version of Linux and a patched version of Apache. Which of the following commands will accomplish this task?

Options:

nmap –f –sV –p80 192.168.1.20

nmap –sS –sL –p80 192.168.1.20

nmap –A –T4 –p80 192.168.1.20

nmap –O –v –p80 192.168.1.20

Question 47

A penetration tester exploited a unique flaw on a recent penetration test of a bank. After the test was completed, the tester posted information about the exploit online along with the IP addresses of the exploited machines. Which of the following documents could hold the penetration tester accountable for this action?