Free PT1-002 Exam Braindumps
CompTIA PenTest+ Questions 36–40 (page: 9)

Updated On: 10-Feb-2026

A penetration tester is testing input validation on a search form that was discovered on a website.
Which of the following characters is the BEST option to test the website for vulnerabilities?

  1. Comma
  2. Double dash
  3. Single quote
  4. Semicolon

Answer(s): C



A penetration tester was conducting a penetration test and discovered the network tra c was no longer reaching the client's IP address. The tester later discovered the SOC had used sinkholing on the penetration tester's IP address.
Which of the following BEST describes what happened?

  1. The penetration tester was testing the wrong assets
  2. The planning process failed to ensure all teams were noti ed
  3. The client was not ready for the assessment to start
  4. The penetration tester had incorrect contact information

Answer(s): B



A penetration tester wants to perform reconnaissance without being detected.
Which of the following activities have a MINIMAL chance of detection? (Choose two.)

  1. Open-source research
  2. A ping sweep
  3. Tra c sni ng
  4. Port knocking
  5. A vulnerability scan
  6. An Nmap scan

Answer(s): E,F


Reference:

https://www.sciencedirect.com/topics/computer-science/passive-reconnaissance



A penetration tester obtained the following results after scanning a web server using the dirb utility:
...

GENERATED WORDS: 4612 -
---- Scanning URL: http://10.2.10.13/ ----
+ http://10.2.10.13/about (CODE:200|SIZE:1520)
+ http://10.2.10.13/home.html (CODE:200|SIZE:214)
+ http://10.2.10.13/index.html (CODE:200|SIZE:214)
+ http://10.2.10.13/info (CODE:200|SIZE:214)
...

DOWNLOADED: 4612 `" FOUND: 4 -
Which of the following elements is MOST likely to contain useful information for the penetration tester?

  1. index.html
  2. about
  3. info
  4. home.html

Answer(s): B



A penetration tester has obtained root access to a Linux-based le server and would like to maintain persistence after reboot.
Which of the following techniques would BEST support this objective?

  1. Create a one-shot systemd service to establish a reverse shell.
  2. Obtain /etc/shadow and brute force the root password.
  3. Run the nc -e /bin/sh <...> command.
  4. Move laterally to create a user account on LDAP

Answer(s): C



Viewing page 9 of 23
Viewing questions 41 - 45 out of 110 questions


Post your Comments and Discuss CompTIA PT1-002 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!