CompTIA PT0-002 問題集

質問 1：
Which of the following is the most important aspect to consider when calculating the price of a penetration test service for a client?
A. Operating cost
B. Required scope of work
C. Client's budget
D. Non-disclosure agreement
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 2：
A penetration tester has been contracted to review wireless security. The tester has deployed a malicious wireless AP that mimics the configuration of the target enterprise WiFi. The penetration tester now wants to try to force nearby wireless stations to connect to the malicious AP. Which of the following steps should the tester take NEXT?
A. Send deauthentication frames to the stations.
B. Perform jamming on all 2.4GHz and 5GHz channels.
C. Modify the malicious AP configuration to not use a pre-shared key.
D. Set the malicious AP to broadcast within dynamic frequency selection channels.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 3：
During a penetration test of a server application, a security consultant found that the application randomly crashed or remained stable after opening several simultaneous connections to the application and always submitting the same packets of data. Which of the following is the best sequence of steps the tester should use to understand and exploit the vulnerability?
A. Attacha remoteprofiler to the server application. Establish a random number of connections to the server application. Send fixed packets of data simultaneously using those connections.
B. Attacha remotedebugger to the server application. Establish a large number of connections to the server application. Send fixed packets of data simultaneously using those connections.
C. Attacha remotedisassembler to the server application. Establish a small number of connections to the server application. Send fixed packets of data simultaneously using those connections.
D. Attacha local disassembler to the server application. Establish a single connection to the server application. Send fixed packets of data simultaneously using that connection.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
A penetration tester is testing a new version of a mobile application in a sandbox environment. To intercept and decrypt the traffic between the application and the external API, the tester has created a private root CA and issued a certificate from it. Even though the tester installed the root CA into the trusted stone of the smartphone used for the tests, the application shows an error indicating a certificate mismatch and does not connect to the server. Which of the following is the MOST likely reason for the error?
A. The application has the API certificate pinned.
B. TCP port 443 is not open on the firewall
C. The tester is using an outdated version of the application
D. The API server is using SSL instead of TLS
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
A penetration tester wants to find the password for any account in the domain without locking any of the accounts. Which of the following commands should the tester use?
A. cme smb 192.168.0.0/24 -u /userList.txt -p /passwordList.txt
B. enum4linux -u userl -p /passwordList.txt 192.168.0.1
C. enum4linux -u userl -p Passwordl 192.168.0.1
D. cme smb 192.168.0.0/24 -u /userList.txt -p Summer123
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 6：
A penetration tester is preparing to perform activities for a client that requires minimal disruption to company operations. Which of the following are considered passive reconnaissance tools? (Choose two.)
A. Nikto
B. Shodan
C. Burp Suite
D. Nessus
E. Retina
F. Wireshark
正解：B,F
解説: (Topexam メンバーにのみ表示されます)

質問 7：
A penetration tester was able to compromise a web server and move laterally into a Linux web server. The tester now wants to determine the identity of the last user who signed in to the web server. Which of the following log files will show this activity?
A. /var/log/last_user
B. /var/log/lastlog
C. /var/log/messages
D. /var/log/user_log
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 8：
Penetration tester who was exclusively authorized to conduct a physical assessment noticed there were no cameras pointed at the dumpster for company. The penetration tester returned at night and collected garbage that contained receipts for recently purchased networking :. The models of equipment purchased are vulnerable to attack. Which of the following is the most likely next step for the penetration?
A. Scan the equipment and verify the findings.
B. Alert the target company of the discovered information.
C. Return to the dumpster for more information.
D. Verify the discovered information is correct with the manufacturer.
正解：A
解説: (Topexam メンバーにのみ表示されます)