Free CompTIA PT0-003 Practice Questions & Answers 2026 Part4 | CompTIA PenTest+

[Attacks and Exploits]During a web application assessment, a penetration tester identifies an input field that allows JavaScript injection. The tester inserts a line of JavaScript that results in a prompt, presenting a text box when browsing to the page going forward.Which of the following types of attacks is this an example of?

[Attacks and Exploits]During a penetration test, the tester identifies several unused services that are listening on all targeted internal laptops.Which of the following technical controls should the tester recommend to reduce the risk of compromise?

During a penetration test, a junior tester uses Hunter.io for an assessment and plans to review the information that will be collected. Which of the following describes the information the junior tester will receive from the Hunter.io tool?

A penetration tester has just started a new engagement. The tester is using a framework that breaks the life cycle into 14 components.Which of the following frameworks is the tester using?

[Attacks and Exploits]A penetration tester writes the following script to enumerate a 1724 network:1 #!/bin/bash2 for i in {1..254}; do3 ping -c1 192.168.1.$i4 doneThe tester executes the script, but it fails with the following error:-bash: syntax error near unexpected token `ping'Which of the following should the tester do to fix the error?

A penetration tester is working on an engagement in which a main objective is to collect confidential information that could be used to exfiltrate data and perform a ransomware attack. During the engagement, the tester is able to obtain an internal foothold on the target network.Which of the following is the next task the tester should complete to accomplish the objective?

While conducting a reconnaissance activity, a penetration tester extracts the following information:Emails:admin@acme.comsales@acme.comsupport@acme.comWhich of the following risks should the tester use to leverage an attack as the next step in the security assessment?

[Attacks and Exploits]A penetration tester wants to use the following Bash script to identify active servers on a network:1 network_addr="192.168.1"2 for h in {1..254}; do3 ping -c 1 -W 1 $network_addr.$h > /dev/null4 if [ $? -eq 0 ]; then5 echo "Host $h is up"6 else7 echo "Host $h is down"8 fi9 doneWhich of the following should the tester do to modify the script?

[Information Gathering and Vulnerability Scanning]A penetration tester needs to launch an Nmap scan to find the state of the port for both TCP and UDPservices.Which of the following commands should the tester use?

[Attacks and Exploits]During a web application assessment, a penetration tester identifies an input field that allows JavaScript injection. The tester inserts a line of JavaScript that results in a prompt, presenting a text box when browsing to the page going forward.Which of the following types of attacks is this an example of?

While performing an internal assessment, a tester uses the following command:crackmapexec smb 192.168.1.0/24 -u user.txt -p Summer123@Which of the following is the main purpose of the command?

During a pre-engagement activity with a new customer, a penetration tester looks for assets to test.

[Reporting and Communication]A tester completed a report for a new client. Prior to sharing the report with the client, which of the following should the tester request to complete a review?

[Attacks and Exploits]A penetration tester assesses an application allow list and has limited command-line access on the Windows system.Which of the following would give the penetration tester information that could aid in continuing the test?

[Attacks and Exploits]During a web application assessment, a penetration tester identifies an input field that allows JavaScript injection. The tester inserts a line of JavaScript that results in a prompt, presenting a text box when browsing to the page going forward.Which of the following types of attacks is this an example of?

[Attacks and Exploits]A penetration tester writes the following script to enumerate a 1724 network:1 #!/bin/bash2 for i in {1..254}; do3 ping -c1 192.168.1.$i4 doneThe tester executes the script, but it fails with the following error:-bash: syntax error near unexpected token `ping'Which of the following should the tester do to fix the error?

Which tool is best suited for mapping attack paths and enumerating privileges within an Active Directory environment?

Which of the following tasks would ensure the key outputs from a penetration test are not lost as part of the cleanup and restoration activities?

A penetration tester is enumerating a Linux system. The goal is to modify the following script to provide more comprehensive system information: #!/bin/bash ps aux >> linux_enum.txt Which of the following lines would provide the most comprehensive enumeration of the system? This command gathers: /etc/passwd -- lists all local user accounts. netstat -tuln -- lists listening ports and associated services. /etc/bash.bashrc -- contains environment variables and configurations that could reveal system behaviors or hidden persistence mechanisms. This provides a much broader and deeper enumeration compared to other options.

[Attacks and Exploits]During a penetration test, the tester identifies several unused services that are listening on all targeted internal laptops.Which of the following technical controls should the tester recommend to reduce the risk of compromise?

[Attacks and Exploits] A penetration tester assesses an application allow list and has limited command-line access on the Windows system. Which of the following would give the penetration tester information that could aid in continuing the test? When a penetration tester has limited command-line access on a Windows system, the choice of tool is critical for gathering information to aid in furthering the test. Here's an explanation for each option: mmc.exe (Microsoft Management Console): Primarily used for managing Windows and its services. It's not typically useful for gathering information about the system from the command line in a limited access scenario. icacls.exe: This tool is used for modifying file and folder permissions. While useful for modifying security settings, it does not directly aid in gathering system information or enumeration. nltest.exe: This is a powerful command-line utility for network testing and gathering information about domain controllers, trusts, and replication status. Key functionalities include: Listing domain controllers: nltest /dclist: Querying domain trusts: nltest /domain_trusts Checking secure channel: nltest /sc_query: These capabilities make nltest very useful for understanding the network environment, especially in a domain context, which is essential for penetration testing. rundll.exe: This utility is used to run DLLs as programs. While it can be used for executing code, it does not provide direct information about the system or network environment. Conclusion: nltest.exe is the best choice among the given options as it provides valuable information about the network, domain controllers, and trust relationships. This information is crucial for a penetration tester to plan further actions and understand the domain environment.

[Tools and Code Analysis]A penetration tester is attempting to discover vulnerabilities in a company's web application. Whichof the following tools would most likely assist with testing the security of the web application?

You have identified a vulnerability in a system and want to confirm its validity. Which method could you use to validate the results using an exploit?

[Attacks and Exploits]A penetration tester is performing an authorized physical assessment. During the test, the tester observes an access control vestibule and on-site security guards near the entry door in the lobby.Which of the following is the best attack plan for the tester to use in order to gain access to the facility?

[Attacks and Exploits]A penetration tester is evaluating a SCADA system. The tester receives local access to a workstation that is running a single application.While navigating through the application, the tester opens a terminal window and gains access to the underlying operating system.Which of the following attacks is the tester performing?

A penetration tester is working on an engagement in which a main objective is to collect confidential information that could be used to exfiltrate data and perform a ransomware attack. During the engagement, the tester is able to obtain an internal foothold on the target network.Which of the following is the next task the tester should complete to accomplish the objective?

A penetration tester is working on an engagement in which a main objective is to collect confidential information that could be used to exfiltrate data and perform a ransomware attack. During the engagement, the tester is able to obtain an internal foothold on the target network.Which of the following is the next task the tester should complete to accomplish the objective?

[Attacks and Exploits]During a penetration test, a tester captures information about an SPN account.Which of the following attacks requires this information as a prerequisite to proceed?

During cleanup, you restore altered firewall rules and system settings to their original state. Which activity does this describe?

[Information Gathering and Vulnerability Scanning]A penetration tester has found a web application that is running on a cloud virtual machine instance. Vulnerability scans show a potential SSRF for the same application URL path with an injectable parameter.Which of the following commands should the tester run to successfully test for secrets exposure exploitability?