Free CompTIA PT0-003 Exam Dumps Questions & Answers

During an assessment, a penetration tester obtains a low-privilege shell and then runs the following command:
findstr /SIM /C:"pass" *.txt *.cfg *.xml
Which of the following is the penetration tester trying to enumerate?

• A.Secrets
• B.Permissions
• C.Configuration files
• D.Virtual hosts

A penetration tester uses Burp Suite to send the following request:

Which of the following options best describes what the tester is executing?

• A.Brute-force attack on usernames or/and password
• B.Cross-site scripting
• C.Session hijack
• D.SQL injection

A penetration tester wants to automatically enumerate all ciphers permitted on TLS/SSL configurations across a client's internet-facing and internal web servers. Which of the following tools or frameworks best supports this objective?

• A.Nmap Scripting Engine
• B.Shodan
• C.Burp Suite
• D.Netcat
• E.Impacket

A tester conducts a web application penetration test and discovers a hidden diagnostics page.
The hidden diagnostics page allows a user to ping other systems and test connectivity. Which of the following payloads is best suited to test this function?

• A.../../../../../../etc/passwd
• B.; whoami ; ps aux
• C.<script>alert(l)</script>
• D.' SELECT @@version --

During an assessment, a penetration tester obtains a list of password digests using Responder.
Which of the following tools would the penetration tester most likely use next?

• A.CeWL
• B.Hashcat
• C.Hydra
• D.Medusa