support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. CompTIA
  4. PT1-002

Free PT1-002 Exam Braindumps
CompTIA PenTest+ Questions 26–30 (page: 7)

Updated On: 10-Feb-2026
Page 7 of 23
PDF with 110 Questions

Which of the following describe the GREATEST concerns about using third-party open-source libraries in application code? (Choose two.)

  1. The libraries may be vulnerable
  2. The licensing of software is ambiguous
  3. The libraries' code bases could be read by anyone
  4. The provenance of code is unknown
  5. The libraries may be unsupported
  6. The libraries may break the application

Answer(s): A,C


Reference:

https://www.infosecurity-magazine.com/opinions/third-party-libraries-the-swiss/



A penetration tester is preparing to perform activities for a client that requires minimal disruption to company operations.
Which of the following are considered passive reconnaissance tools? (Choose two.)

  1. Wireshark
  2. Nessus
  3. Retina
  4. Burp Suite
  5. Shodan
  6. Nikto

Answer(s): A,E


Reference:

https://resources.infosecinstitute.com/topic/top-10-network-recon-tools/



A consultant is reviewing the following output after reports of intermittent connectivity issues:
? (192.168.1.1) at 0a:d1:fa:b1:01:67 on en0 ifscope [ethernet]
? (192.168.1.12) at 34:a4:be:09:44:f4 on en0 ifscope [ethernet]
? (192.168.1.17) at 92:60:29:12:ac:d2 on en0 ifscope [ethernet]
? (192.168.1.34) at 88:de:a9:12:ce:fb on en0 ifscope [ethernet]
? (192.168.1.136) at 0a:d1:fa:b1:01:67 on en0 ifscope [ethernet]
? (192.168.1.255) at ff:ff:ff:ff:ff:ff on en0 ifscope [ethernet]
? (224.0.0.251) at 01:02:5e:7f:ff:fa on en0 ifscope permanent [ethernet]
? (239.255.255.250) at ff:ff:ff:ff:ff:ff on en0 ifscope permanent [ethernet] Which of the following is MOST likely to be reported by the consultant?

  1. A device on the network has an IP address in the wrong subnet.
  2. A multicast session was initiated using the wrong multicast group.
  3. An ARP ooding attack is using the broadcast address to perform DDoS.
  4. A device on the network has poisoned the ARP cache.

Answer(s): B



Which of the following BEST describe the OWASP Top 10? (Choose two.)

  1. The most critical risks of web applications
  2. A list of all the risks of web applications
  3. The risks de ned in order of importance
  4. A web-application security standard
  5. A risk-governance and compliance framework
  6. A checklist of Apache vulnerabilities

Answer(s): A,C


Reference:

https://www.synopsys.com/glossary/what-is-owasp-top-10.html



A penetration tester conducted a discovery scan that generated the following:



Which of the following commands generated the results above and will transform them into a list of active hosts for further analysis?

  1. nmap "oG list.txt 192.168.0.1-254 , sort
  2. nmap "sn 192.168.0.1-254 , grep Nmap scan | awk '{print S5}'
  3. nmap "-open 192.168.0.1-254, uniq
  4. nmap "o 192.168.0.1-254, cut "f 2

Answer(s): D



  PDF
Viewing page 7 of 23
Viewing questions 31 - 35 out of 110 questions


Post your Comments and Discuss CompTIA PT1-002 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!