Most Recent CompTIA PT0-002 Exam Dumps

Prepare for the CompTIA PenTest+ Certification Exam exam with our extensive collection of questions and answers. These practice Q&A are updated according to the latest syllabus, providing you with the tools needed to review and test your knowledge.

QA4Exam focus on the latest syllabus and exam objectives, our practice Q&A are designed to help you identify key topics and solidify your understanding. By focusing on the core curriculum, These Questions & Answers helps you cover all the essential topics, ensuring you're well-prepared for every section of the exam. Each question comes with a detailed explanation, offering valuable insights and helping you to learn from your mistakes. Whether you're looking to assess your progress or dive deeper into complex topics, our updated Q&A will provide the support you need to confidently approach the CompTIA PT0-002 exam and achieve success.

The questions for PT0-002 were last updated on Jun 15, 2025.

Viewing page 1 out of 93 pages.
Viewing questions 1-5 out of 464 questions

Get All 464 Questions & Answers

Question No. 1

A company has recruited a penetration tester to conduct a vulnerability scan over the network. The test is confirmed to be on a known environment. Which of the following would be the BEST option to identify a system properly prior to performing the assessment?

AAsset inventory

BDNS records

CWeb-application scan

DFull scan

Show Answer

Correct Answer: A

Question No. 2

An Nmap scan of a network switch reveals the following:

Which of the following technical controls will most likely be the FIRST recommendation for this device?

AEncrypted passwords

BSystem-hardening techniques

CMultifactor authentication

DNetwork segmentation

Show Answer

Correct Answer: B

Question No. 3

Which of the following should be included in scope documentation?

AService accounts

BTester experience

CDisclaimer

DNumber of tests

Show Answer

Correct Answer: C

A disclaimer is a statement that limits the liability of the penetration tester and the client in case of any unintended consequences or damages caused by the testing activities. It should be included in the scope documentation to clarify the roles and responsibilities of both parties and to avoid any legal disputes or misunderstandings.Service accounts, tester experience, and number of tests are not essential elements of the scope documentation, although they may be relevant for other aspects of the penetration testing process.Reference:The Official CompTIA PenTest+ Study Guide (Exam PT0-002), Chapter 1: Planning and Scoping Penetration Tests1; The Official CompTIA PenTest+ Student Guide (Exam PT0-002), Lesson 1: Planning and Scoping Penetration Tests2; What is the Scope of a Penetration Test?3

Question No. 4

A penetration tester discovered a vulnerability that has the following CVEs:

Which of the following CVEs should be remediated first?

ACVE-2007-6750

BCVE-2011-3192

CCVE-2012-2122

DCVE-2014-0160

ECVE-2017-7494

Show Answer

Correct Answer: A

Question No. 5

A penetration tester has identified several newly released CVEs on a VoIP call manager. The scanning tool the tester used determined the possible presence of the CVEs based off the version number of the service. Which of the following methods would BEST support validation of the possible findings?

AManually check the version number of the VoIP service against the CVE release

BTest with proof-of-concept code from an exploit database

CReview SIP traffic from an on-path position to look for indicators of compromise

DUtilize an nmap --sV scan against the service

Show Answer

Correct Answer: B

Testing with proof-of-concept code from an exploit database is the best method to support validation of the possible findings, as it will demonstrate whether the CVEs are actually exploitable on the target VoIP call manager. Proof-of-concept code is a piece of software or script that shows how an attacker can exploit a vulnerability in a system or application. An exploit database is a repository of publicly available exploits, such asExploit DatabaseorMetasploit.

Unlock All Questions for CompTIA PT0-002 Exam

Full Exam Access, Actual Exam Questions, Validated Answers, Anytime Anywhere, No Download Limits, No Practice Limits

Get All 464 Questions & Answers