CompTIA PT0-002 問題集

質問 1：
A software company has hired a security consultant to assess the security of the company's software development practices. The consultant opts to begin reconnaissance by performing fuzzing on a software binary. Which of the following vulnerabilities is the security consultant MOST likely to identify?
A. Weak authentication schemes
B. Non-optimized resource management
C. Credentials stored in strings
D. Buffer overflows
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
A penetration tester is conducting an Nmap scan and wants to scan for ports without establishing a connection. The tester also wants to find version data information for services running on Projects. Which of the following Nmap commands should the tester use?
A. ..nmap -sT -v -T5 target.company.com
B. ..nmap -sX -sC target.company.com
C. ..nmap -sU -sV -T4 -F target.company.com
D. ..nmap -sS -sV -F target.company.com
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 3：
A penetration tester is conducting an unknown environment test and gathering additional information that can be used for later stages of an assessment. Which of the following would most likely produce useful information for additional testing?
A. Searching for code repositories associated with the target company's organization
B. Searching for code repositories associated with a developer who previously worked for the target company
C. Searching for code repositories target company's organization
D. Searching for code repositories associated with a developer who previously worked for the target company code repositories associated with the
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
A penetration tester wants to accomplish ARP poisoning as part of an attack. Which of the following tools will the tester most likely utilize?
A. Ettercap
B. Netcat
C. Nmap
D. Wireshark
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
SIMULATION
A penetration tester has been provided with only the public domain name and must enumerate additional information for the public-facing assets.
INSTRUCTIONS
Select the appropriate answer(s), given the output from each section.
Output 1






正解：




質問 6：
Which of the following situations would MOST likely warrant revalidation of a previous security assessment?
A. After a merger or an acquisition
B. When an organization updates its network firewall configurations
C. After detection of a breach
D. When most of the vulnerabilities have been remediated
正解：D

質問 7：
A company becomes concerned when the security alarms are triggered during a penetration test. Which of the following should the company do NEXT?
A. Halt the penetration test.
B. Assume the alert is from the penetration test.
C. Deconflict with the penetration tester.
D. Contact law enforcement.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 8：
A penetration tester attempted a DNS poisoning attack. After the attempt, no traffic was seen from the target machine. Which of the following MOST likely caused the attack to fail?
A. The DNS information was incorrect.
B. The client did not receive a trusted response.
C. The injection was too slow.
D. The DNS cache was not refreshed.
正解：D
解説: (Topexam メンバーにのみ表示されます)