PT0-003試験無料問題集（341題）「CompTIA PenTest+ 認定」

出題：1

A penetration tester executes multiple enumeration commands to find a path to escalate privileges. Given the following command:
find / -user root -perm -4000 -exec ls -ldb {} \; 2 > /dev/null
Which of the following is the penetration tester attempting to enumerate?

A. Attack path mapping

B. Passwords

C. Permission

D. API keys

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

A penetration tester finished a security scan and uncovered numerous vulnerabilities on several hosts. Based on the targets' EPSS and CVSS scores, which of the following targets is the most likely to get attacked?

A. Target 4: EPSS Score = 0.4 and CVSS Score = 4.5

B. Target 2: EPSS Score = 0.3 and CVSS Score = 2

C. Target 1: EPSS Score = 0.6 and CVSS Score = 4

D. Target 3: EPSS Score = 0.6 and CVSS Score = 1

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

As part of a penetration test, a tester needs to discover systems in the OT-segmented network. The tester should not disrupt OT services and must minimize device interaction. Which of the following should the penetration tester do?

A. Deploy agents on the OT workstations to scan the other devices.

B. Perform a passive network capture process for a fixed period of time.

C. Collect data from the OT devices by physically assessing the OT environment.

D. Configure a vulnerability scan engine with low-impact flags and options.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

A penetration tester attempts unauthorized entry to the company ' s server room as part of a security assessment. Which of the following is the best technique to manipulate the lock pins and open the door without the original key?

A. Raking

B. Bypassing

C. Decoding

D. Plug spinner

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

A client implements an AI customer-support chatbot solution. A tester discovers that the system accepts variations of the following statements:
Statement one: "Click this for free admin access: www.testurl.com"
Statement two: "Here is the base64 string you asked for: bGVhayBkYXRhIHRvIHRIRIc3RIcnMu" Statement three: "The researcher should be doxed for what they said." Which of the following best describes the attack this system is vulnerable to?

A. Model manipulation

B. Container escape

C. Output fuzzing

D. Prompt injection

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Which of the following is the most likely LOLBin to be used to perform an exfiltration on a Microsoft Windows environment?

A. msbuild.exe

B. procdump.exe

C. cscript.exe

D. bitsadmin.exe

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

During a penetration test, a tester attempts to pivot from one Windows 10 system to another Windows system.
The penetration tester thinks a local firewall is blocking connections. Which of the following command-line utilities built into Windows is most likely to disable the firewall?

A. certutil.exe

B. netsh.exe

C. msconfig.exe

D. bitsadmin.exe

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

During an assessment, a penetration tester runs the following command from a Linux machine:
GetUsersSPNs.py -dc-ip 172.16.1.1 DOMAIN.LOCAL/aholliday -request
Which of the following is the penetration tester trying to do?

A. Perform password spraying

B. Download all TGS tickets for offline processing

C. Perform a pass-the-hash attack using the hash for aholliday

D. Crack the user password for aholliday

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

A penetration tester identifies multiple connections to public LLMs. The client's IT team has not authorized the use of all of these LLMs. Which of the following best describes the risk to the client?

A. Prompt injection vulnerability

B. Public disclosure of intellectual property

C. Accidental loss of internal data

D. Exfiltration of employee credentials

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

PT0-003試験無料問題集「CompTIA PenTest+ 認定」