Online Access Free CompTIA.PT0-001.v2022-09-05.q129 Practice Test (Page 13)

PT0-001 Exam Question 56

A penetration tester is checking a script to determine why some basic math errors are persisting. The expected result was the program outputting "True".

Given the output from the console above, which of the following explains how to correct the errors in the script? (Choose two.)

A.Change 'fi' to 'Endli'.

B.Change the '=' to '-eq'.

C.Change 'source' and 'dest' to "$source" and "$dest".

D.Change 'else' to 'elif'.

E.Remove the 'let' in front of 'dest=5+5'.

PT0-001 Exam Question 57

A penetration tester is performing a black-box test of a client web application, and the scan host is unable to access it. The client has sent screenshots showing the system is functioning correctly. Which of the following is MOST likely the issue?

A.The penetration tester was not provided with a WSDL file.

B.An IPS/WAF whitelist is in place to protect the environment.

C.The penetration tester needs an OAuth bearer token.

D.The tester has provided an incorrect password for the application.

PT0-001 Exam Question 58

A tester has determined that null sessions are enabled on a domain controller. Which of the following attacks can be performed to leverage this vulnerability?

A.Password brute forcing to log into the host

B.RID cycling to enumerate users and groups

C.Session hijacking to impersonate a system account

D.Pass the hash to relay credentials

PT0-001 Exam Question 59

A vulnerability scan is run against a domain hosing a banking application that accepts connections over MTTPS and HTTP protocols Given the following results:
* SSU3 supported
* HSTS not enforced
* Application uses weak ciphers
* Vulnerable to clickjacking
Which of the following should be ranked with the HIGHEST risk?

A.Application uses week ophers

B.HSTS not enforced

C.SSLv3 supported

D.Vulnerable to clickjacking

PT0-001 Exam Question 60

A penetration tester successfully exploits a Windows host and dumps the hashes Which of the following hashes can the penetration tester use to perform a pass-the-hash attack?
A)