Free Access CompTIA.PT0-001.v2022-06-28.q222 Practice Test (Page 20)

Question 91

In which of the following scenarios would a tester perform a Kerberoasting attack?

A.The tester has compromised a Windows device and dumps the LSA secrets.

B.The tester has compromised a limited-privilege user and needs to target other accounts for lateral movement.

C.The tester has compromised an account and needs to dump hashes and plaintext passwords from the system.

D.The tester needs to retrieve the SAM database and crack the password hashes.

Question 92

A penetration tester, who is not on the client's network. is using Nmap to scan the network for hosts that are in scope. The penetration tester is not receiving any response on the command:
nmap 100.100/1/0-125
Which of the following commands would be BEST to return results?

A.nmap -Pn -sT 100.100.1.0-125

B.nmap -sV -oA output 100.100.10-125

C.nmap -sF -p 100.100.1.0-125

D.nmap 100.100.1.0-125 -T4

Question 93

A penetration tester reports an application is only utilizing basic authentication on an Internet-facing application.
Which of the following would be the BEST remediation strategy?

A.Enable HTTP Strict Transport Security.

B.Enable a secure cookie flag.

C.Encrypt the communication channel.

D.Sanitize invalid user input.

Question 94

Given the following script:

Which of the following BEST describes the purpose of this script?

A.Log collection

B.Keystroke monitoring

C.Event collection

D.Debug message collection

Question 95

A client requests that a penetration tester emulate a help desk technician who was recently laid off. Which of the following BEST describes the abilities of the threat actor?

A.Hacktivist

B.Script kiddie

C.Advanced persistent threat

D.Organized crime

Other Version: 5219CompTIA.PT0-001.v2022-01-15.q208; 55CompTIA.Ipassleader.PT0-001.v2021-11-19.by.hardy.149q.pdf

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 104HP.HPE0-V27.v2025-09-11.q78; 118Oracle.1Z0-1057-23.v2025-09-10.q47; 151Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 165TheSecOpsGroup.CNSP.v2025-09-08.q20; 223CFAInstitute.ESG-Investing.v2025-09-08.q173; 170PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 150Salesforce.Data-Architect.v2025-09-05.q216; 144Adobe.AD0-E605.v2025-09-05.q50

Question 91

Question 92

Question 93

Question 94

Question 95

Download PDF File