PT0-003 Practice Test practice questions, page 10 of 14, with answer review and explanations.
Question 46
A penetration tester gains shell access to a Windows host. The tester needs to permanently turn off protections in order to install additional payload. Which of the following commands is most appropriate?
sc config <svc_name> start=disabled
sc query state= all
pskill
net config <svc_name>
Question 47
A penetration tester discovers data to stage and exfiltrate. The client has authorized movement to the tester’s attacking hosts only. Which of the following would be most appropriate to avoid alerting the SOC?
Apply UTF-8 to the data and send over a tunnel to TCP port 25.
Apply Base64 to the data and send over a tunnel to TCP port 80.
Apply 3DES to the data and send over a tunnel UDP port 53.
Apply AES-256 to the data and send over a tunnel to TCP port 443.
Question 48
A penetration tester performs a service enumeration process and receives the following result after scanning a server using the Nmap tool: Based on the output, which of the following services provides the best target for launching an attack?
Database
Remote access
Email
File sharing
Question 49
A penetration tester is performing a cloud-based penetration test against a company. Stakeholders have indicated the priority is to see if the tester can get into privileged systems that are not directly accessible from the internet. Given the following scanner information: Server-side request forgery vulnerability in test.comptia.org Reflected cross-site scripting vulnerability in test2.comptia.org Publicly accessible storage system named static_comptia_assets SSH port 22 open to the intemet on test3.comptia.org Open redirect vulnerability in test4.comptia.org Which of the following of the attack paths should the tester prioritize first?
Synchronize all the information from the public bucket and scan it with Trufflehog.
Run Pacu to enumerate permissions and roles within the cloud-based systems.
Perform a full dictionary brute-force attack against the open SSH service using Hydra.
Use the reflected cross-site scripting attack within a phishing campaign to attack administrators.
Leverage the SSRF to gain access to credentials from the metadata service.
Question 50
A client recently hired a penetration testing firm to conduct an assessment of their consumer-facing web application. Several days into the assessment, the client's networking team observes a substantial increase in DNS traffic. Which of the following would most likely explain the increase in DNS traffic?