QUESTION: 85

Which of the following provides an exploitation suite with payload modules that cover the broadest range of target system types?

Nessus
Metasploit
Burp Suite
Ethercap

Answer(s): B

Show Answer Next Question

A security professional wants to test an IoT device by sending an invalid packet to a proprietary service listening on TCP port 3011. Which of the following would allow the security professional to easily and programmatically manipulate the TCP header length and checksum using arbitrary numbers and to observe how the proprietary service responds?

Nmap
tcpdump
Scapy
hping3

Answer(s): C

Show Answer Next Question

QUESTION: 87

Which of the following should a penetration tester do NEXT after identifying that an application being tested has already been compromised with malware?

Analyze the malware to see what it does.
Collect the proper evidence and then remove the malware.
Do a root-cause analysis to find out how the malware got in.
Remove the malware immediately.
Stop the assessment and inform the emergency contact.

Answer(s): E

Show Answer Next Question

QUESTION: 88

A penetration tester who is conducting a vulnerability assessment discovers that ICMP is disabled on a network segment. Which of the following could be used for a denial-of-service attack on the network segment?

Smurf
Ping flood
Fraggle
Ping of death

Answer(s): C

Show Answer Next Question

Free CompTIA PT0-002 Exam Braindumps (page: 23)

QUESTION: 85

QUESTION: 86

QUESTION: 87

QUESTION: 88

PT0-002 Exam Discussions & Posts