CompTIA PT0-001 - Questions & Answers

Which of the following types of intrusion techniques is the use of an "under-the-door tool" during a physical security assessment an example of?

Which of the following BEST describes some significant security weaknesses with an ICS, such as those used in electrical utility facilities, natural gas facilities, dams, and nuclear facilities?

An energy company contracted a security firm to perform a penetration test of a power plant, which employs ICS to manage power generation and cooling.

Which of the following is a consideration unique to such an environment that must be made by the firm when preparing for the assessment?

Which of the following types of physical security attacks does a mantrap mitigate-?

A penetration tester wants to target NETBIOS name service.

Which of the following is the most likely command to exploit the NETBIOS name service?

A penetration tester compromises a system that has unrestricted network over port 443 to any host. The penetration tester wants to create a reverse shell from the victim back to the attacker.

Which of the following methods would the penetration tester mostly like use?

A penetration tester identifies the following findings during an external vulnerability scan:

Which of the following attack strategies should be prioritized from the scan results above?

After several attempts, an attacker was able to gain unauthorized access through a biometric sensor using the attacker's actual fingerprint without exploitation.

Which of the following is the MOST likely explanation of what happened?

A penetration tester notices that the X-Frame-Optjons header on a web application is not set.

Which of the following would a malicious actor do to exploit this configuration setting?

A financial institution is asking a penetration tester to determine if collusion capabilities to produce wire fraud are present.

Which of the following threat actors should the penetration tester portray during the assessment?