exam questions

Exam PT0-002 All Questions

View all questions & answers for the PT0-002 exam

Exam PT0-002 topic 1 question 168 discussion

Actual exam question from CompTIA's PT0-002
Question #: 168
Topic #: 1
[All PT0-002 Questions]

SIMULATION -
Using the output, identify potential attack vectors that should be further investigated.





Show Suggested Answer Hide Answer
Suggested Answer: See explanation below.
1: Null session enumeration

Weak SMB file permissions -

Fragmentation attack -
2: nmap
-sV
-p 1-1023
192.168.2.2
3: #!/usr/bin/python
export $PORTS = 21,22
for $PORT in $PORTS:
try:
s.connect((ip, port))
print(ג€%s:%s ג€" OPENג€ % (ip, port))
except socket.timeout
print(ג€%:%s ג€" TIMEOUTג€ % (ip, port))
except socket.error as e:
print(ג€%:%s ג€" CLOSEDג€ % (ip, port))
finally
s.close()
port_scan(sys.argv[1], ports)

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
TKW36
Highly Voted 1 year, 9 months ago
These PBQs are a mash of the four found earlier in the dump. The last two panels are referencing the first PBQ found on Page 2 Question #11. I guess it's what would be wrong with the Source Code, though I'm not sure you're suppose to pick these over the certificates to remediate (I don't think so). The first two panels are referencing the PBQ found on page 6 Question #56. The answer given for the second panel is wrong. It should be nmap 192.168.2.2 -O -SV --top-ports=100 because it returned 4 open ports with 96 closed ports. Nmap by default scans 1000 ports unless altered. This was still wrong on the first PBQ but in the comments the right answer was given. The middle panel, 3rd in this list is referencing Page 5 Question #48. Again it is wrong here as well because it tells you to pick the options with "$" in it, for example: $PORTS = 21,22. This is wrong because this is a PYTON script and PYTON does not use $ in it's syntax, PowerShell does. You'd choose any option without $ in it. The correct answer is given on the first PBQ so don't reference this one at all.
upvoted 16 times
[Removed]
1 year, 8 months ago
3- PBQs Question with answer Step 1 - Generate a Certificate Signing Request Step 2 - Submit CSR to the CA Step 3 - Install re-issued certificate on the server Step 4 - Remove Certificate from Server
upvoted 4 times
PhillyCheese
10 months, 1 week ago
1. Generate a Certificate Signing Request (CSR): This step is the first step in the process of obtaining a new certificate. The CSR is a file that contains information about the website and the organization that operates it, as well as a public key. This file is then sent to a Certificate Authority (CA) to request a new certificate. 2. Submit CSR to the CA: Once the CSR is generated, it is sent to the chosen CA. The CA will then validate the information in the CSR and issue a new certificate. 3. Install re-issued certificate on the server: Once the new certificate is issued, it needs to be installed on the server. This step ensures that the new certificate is properly configured and can be used to secure the website. 4. Remove certificate from server: After the new certificate is installed, the old certificate needs to be removed from the server to avoid any confusion or security issues.
upvoted 1 times
...
...
[Removed]
1 year, 8 months ago
First PBQs Questions with answer Part 1: nmap 192.168.2.2 - O-SV topports=100 Part 2: Weak SMB file permission
upvoted 3 times
kloug
1 year, 8 months ago
What about null session enumeration and fragmentation
upvoted 4 times
...
...
kenechi
1 year, 7 months ago
nmap by default scans 1000 ports if no port flag is stated. But since 96 ports where closed, it shows that 100 ports were scanned. If that be the case including --top-ports=100 scans top 100 ports.
upvoted 1 times
...
...
[Removed]
Highly Voted 1 year, 8 months ago
Second PBQs Question with answer 1 - #!/usr/bin/python 2- ports = [21,22] 3- for port in ports: 4- last is: port _scan(sys.argv [1], ports)
upvoted 9 times
...
[Removed]
Most Recent 11 months ago
This is a 3 part PBQ: You are a penetration tester reviewing a client's website through a web browser. Part 1. #remediatecertificates • Step 1 - Generate a Certificate Signing Request • Step 2 - Submit CSR to the CA • Step 3 - Install re-issued certificate on the server • Step 4 - Remove Certificate from Server Part. 2 #remediatecookies HTTP | SECURE | SameSite is are the fields. Below are the answers | ASP.NET_SessionID | False | True | True | | _utma | False | False | False | | _utmb | False | False | False | | _utmc | False | False | False | | _utmt | False | False | False | | _utmv | False | False | False | | _utmz | False | False | False | | _spid0767 | False | False | False | | _sp_id.0767 | False | False | False | Part 3 #remediate source Lines 21 & 24
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago