Free Access CompTIA.PT0-002.v2024-06-12.q330 Practice Test (Page 49)

Question 236

Penetration-testing activities have concluded, and the initial findings have been reviewed with the client. Which of the following best describes the NEXT step in the engagement?

A.Acceptance by the client and sign-off on the final report

B.Attestation of findings and delivery of the report

C.Scheduling of follow-up actions and retesting

D.Review of the lessons learned during the engagement

Question 237

A penetration tester is testing a new API for the company's existing services and is preparing the following script:

Which of the following would the test discover?

A.Supported HTTP methods

B.Listening web servers in a domain

C.Open web ports on a host

D.Default web configurations

Question 238

Which of the following web-application security risks are part of the OWASP Top 10 v2017? (Choose two.)

A.Buffer overflows

B.Cross-site scripting

C.Race-condition attacks

D.Zero-day attacks

E.Injection flaws

F.Ransomware attacks

Question 239

A penetration tester has gained access to part of an internal network and wants to exploit on a different network segment. Using Scapy, the tester runs the following command: