Free CompTIA PT0-001 Exam Dumps Questions & Answers

A penetration tester needs to use Nmap to scan a host with a very low speed so the WAF or IPS/IDS is not triggered. Which of the following command-line parameters should be added to the Nmap command?

• A.-t 5
• B.-sP 10
• C.-t 1
• D.-sV

Given the following HTTP response:
http/1.0 200 OK
Server: Apache
Set-Cookie: AUTHID=879DHUT74D9A7C; http-only
Content-type: text/html
Connection: Close
Which of the following aspects of an XSS attack would be prevented?

• A.Client-side website defacement
• B.JavaScript keylogging
• C.Session hijacking
• D.Cross-site request forgery

A penetration tester is using the Onesixtyone tool on Kali Linux to try to exploit the SNMP protocol on a target that has SNMP enabled Which of the following types of attacks is the penetration tester performing?

• A.Name resolution attack
• B.Man-in-the-middle attack
• C.Buffer overflow attack
• D.Dictionary-based attack

Which of the following BEST describes the difference between a red team engagement and a penetration test?

• A.A penetration test has a broad scope and focuses more on vulnerability identification while a red team engagement has a limited scope and emulates advanced persistent threats
• B.A penetration test has a broad scope and emulates advanced persistent threats while a red team engagement has a limited scope and focuses more on vulnerability identification
• C.A red team engagement has a broad scope and emulates advanced persistent threats, while a penetration test has a limited scope and focuses more on vulnerability identification
• D.A red team engagement has a broad scope and focuses more on vulnerability identification, while a penetration test has a limited scope and emulates advanced persistent threats

A penetration tester has gained physical access to a facility and connected directly into the internal network.
The penetration tester now wants to pivot into the server VLAN. Which of the following would accomplish this?

• A.Spoofing a printer's MAC address
• B.Abusing DTP negotiation
• C.Conducting an STP attack
• D.Performing LLMNR poisoning