CompTIA PenTest+ CERTIFICATION PAPER
2026 FULL SOLUTION GRADED A+
● Tailgating. Answer: hacker gains access by following behind someone
who isn't complicit or aware
example: hacker walks through an opened door as it is closing
● Lock Bypass. Answer: ▪ Pentester could jam a lock or bypass it by
manipulating the locking function
▪ Stop a door from being shut fully by inserting a spacer or wedge
* breaking a lock
● Egress Sensor. Answer: ▪ Door will automatically unlock and open
when a person approaches
▪ Sensors could be tricked to allow the door to be opened
▪ Some of these "fail open" when power is lost
● Man-in-the-Middle. Answer: ▪ ARP spoofing
▪ Replay
▪ Relay
▪ SSL stripping
, ▪ Downgrade
● ARP Spoofing. Answer: ▪ Attacker sends falsified ARP messages over
the local area network
▪ Results in the attacker's MAC being associated with the IP of a valid
computer
● Replay Attack. Answer: ▪ Attack occurs when valid data is captured
by an attacker and is repeated or delayed
▪ For example, they could capture a wireless authentication handshake
and replay it to gain access to the wireless network as an authenticated
client
● Relay attack. Answer: ▪ Attack occurs when the attacker is able to
become the man-in-the-middle and acts as a middle man in a
communication session
● SSL Stripping. Answer: ▪ Attack where a website's encryption is
tricked into presenting the user with a HTTP connection instead of a
HTTPS connection
● Downgrade. Answer: ▪ Attack that attempts to have a client or server
abandon a higher security mode to use a lower security mode
▪ TLS 1.2 is more secure than SSL 2.0
2026 FULL SOLUTION GRADED A+
● Tailgating. Answer: hacker gains access by following behind someone
who isn't complicit or aware
example: hacker walks through an opened door as it is closing
● Lock Bypass. Answer: ▪ Pentester could jam a lock or bypass it by
manipulating the locking function
▪ Stop a door from being shut fully by inserting a spacer or wedge
* breaking a lock
● Egress Sensor. Answer: ▪ Door will automatically unlock and open
when a person approaches
▪ Sensors could be tricked to allow the door to be opened
▪ Some of these "fail open" when power is lost
● Man-in-the-Middle. Answer: ▪ ARP spoofing
▪ Replay
▪ Relay
▪ SSL stripping
, ▪ Downgrade
● ARP Spoofing. Answer: ▪ Attacker sends falsified ARP messages over
the local area network
▪ Results in the attacker's MAC being associated with the IP of a valid
computer
● Replay Attack. Answer: ▪ Attack occurs when valid data is captured
by an attacker and is repeated or delayed
▪ For example, they could capture a wireless authentication handshake
and replay it to gain access to the wireless network as an authenticated
client
● Relay attack. Answer: ▪ Attack occurs when the attacker is able to
become the man-in-the-middle and acts as a middle man in a
communication session
● SSL Stripping. Answer: ▪ Attack where a website's encryption is
tricked into presenting the user with a HTTP connection instead of a
HTTPS connection
● Downgrade. Answer: ▪ Attack that attempts to have a client or server
abandon a higher security mode to use a lower security mode
▪ TLS 1.2 is more secure than SSL 2.0
