PT0-002 무료 덤프문제 온라인 액세스

Given the following user-supplied data:
www.comptia.com/info.php?id=1 AND 1=1
Which of the following attack techniques is the penetration tester likely implementing?

• A.Time-based SQL injection
• B.Boolean-based SQL injection
• C.Reflected cross-site scripting
• D.Stored cross-site scripting

During the assessment of a client's cloud and on-premises environments, a penetration tester was able to gain ownership of a storage object within the cloud environment using the..... premises credentials. Which of the following best describes why the tester was able to gain access?

• A.Key mismanagement between the environments
• B.Federation misconfiguration of the container
• C.laaS failure at the provider
• D.Container listed in the public domain

An assessor wants to run an Nmap scan as quietly as possible. Which of the following commands will give the LEAST chance of detection?

• A.nmap - T0 192.168.0.1
• B.nmap -"T3 192.168.0.1
• C.nmap - A 192.168.0.1
• D.nmap - "P0 192.168.0.1

Which of the following situations would require a penetration tester to notify the emergency contact for the engagement?

• A.The team exploits a critical server within the organization.
• B.The team exfiltrates PII or credit card data from the organization.
• C.The team loses access to the network remotely.
• D.The team discovers another actor on a system on the network.

During enumeration, a red team discovered that an external web server was frequented by employees. After compromising the server, which of the following attacks would best support ------------company systems?

• A.A command injection attack
• B.Aside-channel attack
• C.A cross-site scripting attack
• D.A watering-hole attack