CompTIA PT0-003 問題集

質問 1：
A penetration tester wants to automatically enumerate all ciphers permitted on TLS/SSL configurations across a client's internet-facing and internal web servers. Which of the following tools or frameworks best supports this objective?
A. Netcat
B. Shodan
C. Nmap Scripting Engine
D. Impacket
E. Burp Suite
正解：C

質問 2：
A penetration tester is trying to get unauthorized access to a web application and execute the following command:

Which of the following web application attacks is the tester performing?
A. Insecure Direct Object Reference
B. Directory Traversal
C. Cross-Site Request Forgery
D. Local File Inclusion
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 3：
A red team member is attempting to gain persistence on a Windows 10 target. Every time the red team member runs the script under the current user, the script fails to execute and renders the following:
C:\user\bbell\scheduledtasks.psl cannot be loaded because running
scripts is disabled on this
Which of the following should the red team member do to most likely get the script to execute?
A. Review the script for proper syntax.
B. Ensure proper runtime libraries are installed.
C. Check for proper user permissions.
D. Use the -ExecutionPolicy Bypass flag.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
During an engagement, a penetration tester needs to break the key for the Wi-Fi network that uses WPA2 encryption. Which of the following attacks would accomplish this objective?
A. KRACK
B. Replay
C. ChopChop
D. Initialization vector
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
During an assessment, a penetration tester gains access to one of the internal hosts. Given the following command:
schtasks /create /tn "Windows Update" /sc onlogon /tr "cmd.exe /c
update.exe"
Which of the following is the penetration tester trying to do with this code?
A. Enumerate the scheduled tasks
B. Establish persistence
C. Create a binary application for Windows System Updates
D. Deactivate the Windows Update functionality
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 6：
A penetration tester cannot complete a full vulnerability scan because the client's WAF is blocking communications. During which of the following activities should the penetration tester discuss this issue with the client?
A. Goal reprioritization
B. Client acceptance
C. Peer review
D. Stakeholder alignment
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 7：
During an assessment, a penetration tester manages to get RDP access via a low-privilege user.
The tester attempts to escalate privileges by running the following commands:
Import-Module .\PrintNightmare.ps1
Invoke-Nightmare -NewUser "hacker" -NewPassword "Password123!" -
DriverName "Print"
The tester attempts to further enumerate the host with the new administrative privileges by using the runas command. However, the access level is still low. Which of the following actions should the penetration tester take next?
A. Log off and log on with "hacker".
B. Add a malicious printer driver.
C. Attempt to add another user.
D. Bypass the execution policy.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 8：
A penetration tester needs to evaluate the security of example.com and gather stealthy information using DNS. Which of the following is the best tool for the tester to use?
A. Nikto
B. Recon-ng
C. masscan
D. InSSIDer
正解：B
解説: (Topexam メンバーにのみ表示されます)