CompTIA PT0-001 問題集

質問 1：
A penetration tester ran the following Nmap scan on a computer:
nmap -aV 192.168.1.5
The organization said it had disabled Telnet from its environment. However, the results of the Nmap scan show port 22 as closed and port 23 as open to SSH. Which of the following is the BEST explanation for what happened?
A. Nmap results contain a false positive for port 23.
B. The service is running on a non-standard port.
C. The organization failed to disable Telnet.
D. Port 22 was filtered.
正解：C

質問 2：
A penetration tester ran an Nmap scan against a target and received the following output:

Which of the following commands would be best for the penetration tester to execute NEXT to discover any weaknesses or vulnerabilities?
A. enum4linux -w 192.168.121.1
B. snmpwalk -c public 192.168.121.1
C. medusa -h 192.168.121.1 -U users.txt -P passwords.txt -M ssh
D. onesixtyone -d 192.168.121.1
正解：B

質問 3：
A penetration tester is utilizing social media to gather information about employees at a company. The tester has created a list of popular words used in employee profile s. For which of the following types of attack would this information be used?
A. Session hijacking
B. Exploit chaining
C. Karma
D. Dictionary
正解：D

質問 4：
A penetration tester is planning to conduct a distributed dictionary attack on a government domain against the login portal. The tester will leverage multiple proxies to mask the origin IPs of the attack. Which of the following threat actors will be emulated?
A. Hacktivist
B. APT
C. Insider threat
D. Script kiddie
正解：B

質問 5：
A tester identifies an XSS attack vector during a penetration test. Which of the following flags should the tester recommend to prevent a JavaScript payload from accessing the cookie?
A. HttpOnly
B. Secure
C. Max-Age
D. Domain
正解：A