Online Access Free CompTIA.PT0-001.v2021-12-21.q123 Practice Test (Page 16)

PT0-001 Exam Question 71

A client has requested an external network penetration test for compliance purposes. During discussion between the client and the penetration tester, the client expresses unwillingness to add the penetration tester's source IP addresses to the client's IPS whitelist for the duration of the test. Which of the following is the BEST argument as to why the penetration tester's source IP addresses should be whitelisted?

A.Testing should focus on the discovery of possible security issues across all in-scope systems, not on determining the relative effectiveness of active defenses such as an IPS.

B.Penetration testing of third-party IPS systems often requires additional documentation and authorizations; potentially delaying the time-sensitive test.

C.Whitelisting prevents a possible inadvertent DoS attack against the IPS and supporting log-monitoring systems.

D.IPS whitelisting rules require frequent updates to stay current, constantly developing vulnerabilities and newly discovered weaknesses.

PT0-001 Exam Question 72

A company requested a penetration tester review the security of an in-house-developed Android application. The penetration tester received an APK file to support the assessment. The penetration tester wants to run SAST on the APK file. Which of the following preparatory steps must the penetration tester do FIRST? (Select TWO)

A.Convert JAR files to DEX

B.Cross-compile the application

C.Attach to ADB

D.Re-sign the APK

E.Decompile

F.Convert to JAR

PT0-001 Exam Question 73

A penetration tester discovers an anonymous FTP server that is sharing the C:\drive. Which of the following is the BEST exploit?

A.Place a batch script in the startup folder for all users.

B.Change a service binary location path to point to the tester's own payload.

C.Escalate the tester's privileges to SYSTEM using the at.exe command.

D.Download, modify, and reupload a compromised registry to obtain code execution.

PT0-001 Exam Question 74

Performance based
You are a penetration Inter reviewing a client's website through a web browser.
Instructions:
Review all components of the website through the browser to determine if vulnerabilities are present.
Remediate ONLY the highest vulnerability from either the certificate source or cookies.