Free PT1-002 Exam braindumps download (PT1-002 exam dumps Free)

QUESTION: 46

A penetration tester has obtained shell access to a Windows host and wants to run a specially crafted binary for later execution using the wmic.exe process call create function.
Which of the following OS or lesystem mechanisms is MOST likely to support this objective?

Alternate data streams
PowerShell modules
MP4 steganography
PsExec

Answer(s): D

Reference:

https://www.varonis.com/blog/wmi-windows-management-instrumentation/

Show Answer Next Question

QUESTION: 47

A penetration tester discovers during a recent test that an employee in the accounting department has been making changes to a payment system and redirecting money into a personal bank account. The penetration test was immediately stopped.
Which of the following would be the BEST recommendation to prevent this type of activity in the future?

Enforce mandatory employee vacations
Implement multifactor authentication
Install video surveillance equipment in the o ce
Encrypt passwords for bank account information

Answer(s): B

Show Answer Next Question

QUESTION: 48

A penetration tester wants to scan a target network without being detected by the client's IDS.
Which of the following scans is MOST likely to avoid detection?

nmap "p0 "T0 "sS 192.168.1.10
nmap "sA "sV --host-timeout 60 192.168.1.10
nmap "f --badsum 192.168.1.10
nmap "A "n 192.168.1.10

Answer(s): B

Show Answer Next Question

QUESTION: 49

Which of the following should a penetration tester do NEXT after identifying that an application being tested has already been compromised with malware?

Analyze the malware to see what it does.
Collect the proper evidence and then remove the malware.
Do a root-cause analysis to nd out how the malware got in.
Remove the malware immediately.
Stop the assessment and inform the emergency contact.

Answer(s): D

Reference:

https://www.redteamsecure.com/blog/my-company-was-hacked-now-what

Show Answer Next Question

QUESTION: 50

A penetration tester runs the following command on a system:
nd / -user root `"perm -4000 `"print 2>/dev/null
Which of the following is the tester trying to accomplish?

Set the SGID on all les in the / directory
Find the /root directory on the system
Find les with the SUID bit set
Find les that were created during exploitation and move them to /dev/null

Answer(s): D

Reference:

https://sagar5258.blogspot.com/2015/03/ nd-command-in-linux-examples.html

Show Answer Next Question

Free PT1-002 Exam Braindumps CompTIA PenTest+ Questions 46–50 (page: 11)

QUESTION: 46

Reference:

QUESTION: 47

QUESTION: 48

QUESTION: 49

Reference:

QUESTION: 50

Reference:

Free PT1-002 Exam Braindumps
CompTIA PenTest+ Questions 46–50 (page: 11)