Sample Questions from CompTIA PenTest+ (PT0-002)

Preview a few questions below — answers are revealed when you take the exam.

1. A security team is conducting a penetration test on a web application and discovers a SQL injection vulnerability. They need to exploit this vulnerability to gain access to sensitive data. What approach should they take to ensure they do not cause any damage to the application or its data?

   • A. Use automated tools to exploit the vulnerability and extract data.
   • B. Manually craft SQL queries to extract specific data without modifying the database.
   • C. Perform a denial-of-service attack to distract the application's administrators.
   • D. Immediately report the vulnerability to the application's developers without attempting to exploit it.

2. During a penetration test, the team identifies a misconfigured S3 bucket that is publicly accessible. What is the best course of action to address this issue without causing any disruption to the application?

   • A. Delete the S3 bucket immediately to prevent any data breaches.
   • B. Notify the bucket owner and provide recommendations for securing the bucket.
   • C. Download all the data from the bucket for further analysis.
   • D. Modify the bucket's permissions to make it private without informing the owner.

3. A penetration tester is tasked with assessing the security of a company's wireless network. They discover that the network is using WPA2 encryption with a weak passphrase. What strategy should they apply to gain access to the network?

   • A. Use a brute-force attack to guess the passphrase.
   • B. Perform a deauthentication attack to disconnect users and capture the handshake.
   • C. Deploy a rogue access point to intercept traffic.
   • D. Use a dictionary attack with a precompiled list of common passphrases.

4. Identify the command used to perform a dictionary attack on a captured WPA2 handshake using Aircrack-ng.

   • A. aircrack-ng -w wordlist.txt -b BSSID capture.cap
   • B. airdecap-ng -w wordlist.txt capture.cap
   • C. airbase-ng -w wordlist.txt capture.cap
   • D. aireplay-ng -w wordlist.txt capture.cap

5. Consider the situation where a penetration tester needs to assess the security of a company's API. They suspect that the API may be vulnerable to XML External Entity (XXE) attacks. Which method solves it best?

   • A. Use automated tools to scan the API for XXE vulnerabilities.
   • B. Manually send crafted XML payloads to the API to test for XXE vulnerabilities.
   • C. Perform a SQL injection attack on the API to gain access to sensitive data.
   • D. Use a brute-force attack to guess the API's authentication credentials.