Free CompTIA PT0-003 Exam Dumps Questions & Answers

Which of the following are the most important considerations when using generative AI to assist in writing a penetration testing report? (Choose two.)

• A.Compare the model's output to another large language model's output.
• B.Review the model's output for potential bias.
• C.Specify which large language model and version is being used.
• D.Ensure a human reviews the accuracy of summaries.
• E.Verify the training data that the model is using is relevant
• F.Protect client data from being ingested into a model.

A penetration tester wants to download sensitive files stored on the client's file server and runs the following scan:

Which of the following TCP ports should the penetration tester target as a next step?

• A.22
• B.990
• C.80
• D.21

A penetration tester is working on an engagement in which a main objective is to collect confidential information that could be used to exfiltrate data and perform a ransomware attack.
During the engagement, the tester is able to obtain an internal foothold on the target network.
Which of the following is the next task the tester should complete to accomplish the objective?

• A.Perform credential dumping.
• B.Share enumeration.
• C.Compromise an endpoint.
• D.Initiate a social engineering campaign.

A penetration tester was able to gain access to a plaintext file on a user workstation. Upon opening the file, the tester notices some strings of randomly generated text. The tester is able to use these strings to move laterally throughout the network by accessing the fileshare on a web application. Which of the following should the organization do to remediate the issue?

• A.Sanitize user input.
• B.Implement password management solution.
• C.Utilize certificate management.
• D.Rotate keys.

The following file was obtained during reconnaissance:

Which of the following is most likely to be successful if a penetration tester achieves non- privileged user access?

• A.Unauthorized access to execute binaries via sudo
• B.Exposure of other users' sensitive data
• C.Corrupting the skeleton configuration file
• D.Hijacking the default user login shells