COMPTIA PENTES 2 UPDATED ACTUAL EXAM QUESTIONS CORRECT ANSWERS GRADED A
PLUS
Question:
Tailgating.
Answer:
hacker gains access by following behind someone who isn't complicit or aware example: hacker
walks through an opened door as it is closing
Question:
Lock Bypass.
Answer:
■ Pentester could jam a lock or bypass it by manipulating the locking function Stop a door from
being shut fully by inserting a spacer or wedge * breaking a lock
Question:
Egress Sensor.
Answer:
■ Door will automatically unlock and open when a person approaches Sensors could be tricked to
allow the door to be opened Some of these "fail open" when power is lost
Question:
Man-in-the-Middle.
Answer:
■ ARP spoofing Replay Relay SSL stripping Downgrade
Question:
, ARP Spoofing.
Answer:
■ Attacker sends falsified ARP messages over the local area network Results in the attacker's MAC
being associated with the IP of a valid computer
Question:
Replay Attack.
Answer:
■ Attack occurs when valid data is captured by an attacker and is repeated or delayed For example,
they could capture a wireless authentication handshake and replay it to gain access to the wireless
network as an authenticated client
Question:
Relay attack.
Answer:
■ Attack occurs when the attacker is able to become the man-in-the-middle and acts as a middle
man in a communication session
Question:
SSL Stripping.
Answer:
■ Attack where a website's encryption is tricked into presenting the user with a HTTP connection
instead of a HTTPS connection
Question:
Downgrade.
Answer:
■ Attack that attempts to have a client or server abandon a higher security mode to use a lower
security mode TLS 1.2 is more secure than SSL 2.0 Downgrade attack will cause session to attempt
PLUS
Question:
Tailgating.
Answer:
hacker gains access by following behind someone who isn't complicit or aware example: hacker
walks through an opened door as it is closing
Question:
Lock Bypass.
Answer:
■ Pentester could jam a lock or bypass it by manipulating the locking function Stop a door from
being shut fully by inserting a spacer or wedge * breaking a lock
Question:
Egress Sensor.
Answer:
■ Door will automatically unlock and open when a person approaches Sensors could be tricked to
allow the door to be opened Some of these "fail open" when power is lost
Question:
Man-in-the-Middle.
Answer:
■ ARP spoofing Replay Relay SSL stripping Downgrade
Question:
, ARP Spoofing.
Answer:
■ Attacker sends falsified ARP messages over the local area network Results in the attacker's MAC
being associated with the IP of a valid computer
Question:
Replay Attack.
Answer:
■ Attack occurs when valid data is captured by an attacker and is repeated or delayed For example,
they could capture a wireless authentication handshake and replay it to gain access to the wireless
network as an authenticated client
Question:
Relay attack.
Answer:
■ Attack occurs when the attacker is able to become the man-in-the-middle and acts as a middle
man in a communication session
Question:
SSL Stripping.
Answer:
■ Attack where a website's encryption is tricked into presenting the user with a HTTP connection
instead of a HTTPS connection
Question:
Downgrade.
Answer:
■ Attack that attempts to have a client or server abandon a higher security mode to use a lower
security mode TLS 1.2 is more secure than SSL 2.0 Downgrade attack will cause session to attempt
