CompTIA PT0-001題庫介紹

CompTIA PenTest+ Certification 的出題範圍廣、題型靈活，不少考生第一次應考都敗在臨場經驗不足。NewDumps 收錄 295 道貼近真實考試的 PT0-001 模擬試題，幫你提前熟悉出題節奏與題目風格。

CompTIA PT0-001 考試概覽:

CompTIA PT0-001 考試大綱主題:

CompTIA PenTest+ Certification 備考常見疑問一次解答

最新的 CompTIA PenTest+ PT0-001 免費考試真題：

問題 #1

A penetration tester runs a script that queries the domain controller for user service principal names. Which of the following techniques is MOST likely being attempted?

A. LSASS credential extraction
B. Kerberoasting
C. Cpassword
D. Cleartext credentials in LDAP

問題 #2

At the beginning of a penetration test, the tester finds a file that includes employee data, such as email addresses, work phone numbers, computers names, and office locations. The file is hosted on a public web server. Which of the following BEST describes the technique that was used to obtain this information?

A. Social engineering
B. OSINT gathering
C. Port scanning
D. Enumeration of services

問題 #3

A penetration tester is attempting to open a socket in a bash script but receives errors when running it. The current state of the relevant line in the script is as follows:

Which of the following lines of code would correct the issue upon substitution?

A. open 3</dev/tcp/$[HOST]/$[PORT]
B. exec 3<>/dev/tcp/${HOST}/${PORT}
C. open 0<>/dev/tcp/${HOST}:${PORT}
D. exec 0</dev/tcp/$[HOST]:$[PORT]
E. open 3</dev/tcp/${HOST}/${PORT}
F. exec 0</dev/tcp/${HOST}/${PORT}

問題 #4

A penetration testing company was hired to conduct a penetration test against Company A's network of 20.10.10.0/24 and mail.companyA.com. While the penetration testing company was in the information gathering phase, it was discovered that the mail.companyA.com IP address resolved to 20.15.1.2 and belonged to Company B.
Which of the following would be the BEST solution to conduct penetration testing against mail.companyA.com?

A. The penetration tester should only use passive open source intelligence gathering methods leveraging publicly available information to analyze mail.companyA.com.
B. The penetration tester should ignore mail.companyA.com testing and complete only the network range 20.10.10.0/24.
C. The penetration tester should ask Company A for a signed statement giving permission to conduct a test against mail.companyA.com.
D. The penetration tester should conduct penetration testing against mail.companyA.com because the domain name is in scope.

問題 #5

A penetration tester is performing a code review. Which of the following testing techniques is being performed?

A. Dynamic analysis
B. Fuzzing analysis
C. Static analysis
D. Run-time analysis

問題與答案：