QUESTION: 153

A penetration tester is reviewing the following DNS reconnaissance results for comptia.org from dig:
...
;; ANSWER SECTION
comptia.org. 3569 IN MX comptia.org-mail.protection.outlook.com.comptia.org. 3569 IN A 3.219.13.186.comptia.org. 3569 IN NS ns1.comptia.org.comptia.org. 3569 IN SOA haven.administrator.comptia.org. comptia.org. 3569 IN MX new.mx0.comptia.org. comptia.org. 3569 IN MX new.mx1.comptia.org.

Which of the following potential issues can the penetration tester identify based on this output?

At least one of the records is out of scope.
There is a duplicate MX record.
The NS record is not within the appropriate domain.
The SOA records outside the comptia.org domain.

Answer(s): A

Reveal Solution Next Question

QUESTION: 154

A consultant just performed a SYN scan of all the open ports on a remote host and now needs to remotely identify the type of services that are running on the host. Which of the following is an active reconnaissance tool that would be BEST to use to accomplish this task?

tcpdump
Snort
Nmap
Netstat
Fuzzer

Answer(s): C

Reveal Solution Next Question

QUESTION: 155

Deconfliction is necessary when the penetration test:

determines that proprietary information is being stored in cleartext.
occurs during the monthly vulnerability scanning.
uncovers indicators of prior compromise over the course of the assessment.
proceeds in parallel with a criminal digital forensic investigation.

Answer(s): D

Reveal Solution Next Question

QUESTION: 156

A penetration tester wants to test a list of common passwords against the SSH daemon on a network device. Which of the following tools would be BEST to use for this purpose?

Hashcat
Mimikatz
Patator
John the Ripper

Answer(s): C

Reveal Solution Next Question

Free PT0-002 Exam Braindumps (page: 39)

QUESTION: 153

QUESTION: 154

QUESTION: 155

QUESTION: 156