A penetration tester has identi ed several newly released CVEs on a VoIP call manager. The scanning tool the tester used determined the possible presence of the CVEs based off the version number of the service. Which of the following methods would BEST support validation of the possible ndings?
Answer(s): D
https://dokumen.pub/hacking-exposed-uni ed-communications-amp-voip-security-secrets-amp-solutions-2nd-edition-9780071798778- 0071798773-9780071798761-0071798765.html
A penetration tester is scanning a corporate lab network for potentially vulnerable services. Which of the following Nmap commands will return vulnerable ports that might be interesting to a potential attacker?
Answer(s): C
A software development team is concerned that a new product's 64-bit Windows binaries can be deconstructed to the underlying code. Which of the following tools can a penetration tester utilize to help the team gauge what an attacker might see in the binaries?
Answer(s): B
https://en.wikipedia.org/wiki/OllyDbg
A mail service company has hired a penetration tester to conduct an enumeration of all user accounts on an SMTP server to identify whether previous staff member accounts are still active. Which of the following commands should be used to accomplish the goal?
Answer(s): A
https://hackerone.com/reports/193314
Which of the following tools provides Python classes for interacting with network protocols?
https://github.com/SecureAuthCorp/impacket
Post your Comments and Discuss CompTIA PT1-002 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the PT1-002 content, but please register or login to continue.