Free CompTIA PT0-002 Exam Dumps Questions & Answers

A penetration tester recently completed a review of the security of a core network device within a corporate environment. The key findings are as follows:
* The following request was intercepted going to the network device:
GET /login HTTP/1.1
Host: 10.50.100.16
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Firefox/31.0
Accept-Language: en-US,en;q=0.5
Connection: keep-alive
Authorization: Basic WU9VUilOQU1FOnNlY3JldHBhc3N3b3jk
* Network management interfaces are available on the production network.
* An Nmap scan returned the following:

Which of the following would be BEST to add to the recommendations section of the final report? (Choose two.)

• A.Disable HTTP/301 redirect configuration.
• B.Eliminate network management and control interfaces.
• C.Enforce enhanced password complexity requirements.
• D.Implement a better method for authentication.
• E.Disable or upgrade SSH daemon.
• F.Create an out-of-band network for management.

A penetration tester exploited a vulnerability on a server and remotely ran a payload to gain a shell. However, a connection was not established, and no errors were shown on the payload execution. The penetration tester suspected that a network device, like an IPS or next-generation firewall, was dropping the connection. Which of the following payloads are MOST likely to establish a shell successfully?

• A.windows/x64/meterpreter/reverse_https
• B.windows/x64/powershell_reverse_tcp
• C.windows/x64/meterpreter/reverse_http
• D.windows/x64/shell_reverse_tcp
• E.windows/x64/meterpreter/reverse_tcp

A penetration tester has gained access to a network device that has a previously unknown IP range on an interface. Further research determines this is an always-on VPN tunnel to a third-party supplier.
Which of the following is the BEST action for the penetration tester to take?

• A.Utilize the tunnel as a means of pivoting to other internal devices.
• B.Disregard the IP range, as it is out of scope.
• C.Stop the assessment and inform the emergency contact.
• D.Scan the IP range for additional systems to exploit.

Which of the following is the most important to include in the scope of a wireless security assessment?

• A.Signal strengths
• B.APs
• C.Frequencies
• D.SSIDs

A company requires that all hypervisors have the latest available patches installed. Which of the following would BEST explain the reason why this policy is in place?

• A.To enable all features of the hypervisor
• B.To provide protection against host OS vulnerabilities
• C.To fix any misconfigurations of the hypervisor
• D.To reduce the probability of a VM escape attack