Free CompTIA PT0-001 Exam Dumps Questions & Answers

A penetration tester has gained physical access to a facility and connected directly into the internal network.
The penetration tester now wants to pivot into the server VLAN. Which of the following would accomplish this?

• A.Spoofing a printer's MAC address
• B.Performing LLMNR poisoning
• C.Conducting an STP attack
• D.Abusing DTP negotiation

Performance based
You are a penetration Inter reviewing a client's website through a web browser.
Instructions:
Review all components of the website through the browser to determine if vulnerabilities are present.
Remediate ONLY the highest vulnerability from either the certificate source or cookies.

Correct Answer:

A security team is switching firewall vendors. The director of security wants to scope a penetration test to satisfy requirements to perform the test after major architectural changes. Which of the following is the BEST way to approach the project?

• A.Design a penetration test approach, focusing on publicly released firewall DoS vulnerabilities.
• B.Review the firewall configuration, followed by a targeted attack by a read team.
• C.Perform a discovery scan to identify changes in the network.
• D.Focus on an objective-based approach to assess network assets with a red team.

Which of the following commands starts the Metasploit database?

• A.workspace
• B.msfvenom
• C.msfconsole
• D.db_connect
• E.db_init

While performing privilege escalation on a Windows 7 workstation, a penetration tester identifies a service that imports a DLL by name rather than an absolute path. To exploit this vulnerability, which of the following criteria must be met?

• A.Weak folder permissions of a directory in the DLL search path
• B.Permissions not disabled in the DLL
• C.Write permissions in the C:\Windows\System32\imports directory
• D.DLL not cryptographically signed by the vendor