CompTIA PenTest+ Exam Test Bank 1 with a review of 435 latest real exam questions and Correct Answers/ CompTIA PenTest+ Exam Prep Test bank 1

CompTIA PenTest+ Exam Test Bank 1 with a review
of 435 latest real exam questions and Correct
Answers/ CompTIA PenTest+ Exam Prep Test bank 1


CompTIA PenTest+ (PT0-002)Exam
During a penetration test, it is discovered that a financial institution's systems show
signs of compromise. Upon further investigation, it is found that the intrusion may
have been ongoing for several years, and sensitive data has been gradually
exfiltrated. What type of threat did the penetration tester most likely uncover?

A. Backdoor
B. Bind shell
C. Daemon
D. APT
D. APT
What type of threat involves an unauthorized user gaining access to a system or
network and remaining undetected for an extended period to exfiltrate data?

A. Backdoor
B. Bind shell
C. Daemon
D. Advanced Persistent Threat (APT)
D. Advanced Persistent Threat (APT)
What is a hidden mechanism that provides unauthorized access to a system but
does not necessarily imply a long-term, data-exfiltrating threat?

A. Advanced Persistent Threat (APT)
B. Backdoor
C. Bind shell
D. Daemon


1

,B. Backdoor
Which type of reverse shell involves the target system binding its shell to a local
network port for remote access, but does not imply a long-term, data-exfiltrating
threat?

A. Daemon
B. Bind shell
C. Backdoor
D. Advanced Persistent Threat (APT)
B. Bind shell
What term refers to a background process or service on a system, but does not
imply a long-term, data-exfiltrating threat?

A. Advanced Persistent Threat (APT)
B. Bind shell
C. Backdoor
D. Daemon
D. Daemon
A PenTester needs to have continuous persistent access to a Linux system. What
method can the PenTester use to accomplish this?

A. Cron
B. Daemon
C. Service
D. Registry
B. Daemon
What Linux system feature allows a PenTester to maintain long-term, continuous
access by remaining always active and potentially caching its state?

A. Cron job
B. Daemon
C. Service
D. Registry


2

,B. Daemon
Why might a cron job not be suitable for providing continuous, persistent access to
a system?

A. It cannot execute scripts.
B. It runs too frequently.
C. It has a minimum execution interval of one minute.
D. It requires administrator privileges to set up.
C. It has a minimum execution interval of one minute.
Which of the following is a background program in Windows that operates without
user interaction and is similar to a daemon in Linux?

A. Cron job
B. Daemon
C. Service
D. Registry
C. Service
Which Linux system component is always active, available for use, and can sustain
long sessions by caching its state?

A. Cron job
B. Daemon
C. Service
D. Registry
B. Daemon
What limitation does a cron job have that prevents it from providing continuous
persistent access?

A. It cannot execute scripts.
B. It only operates with user interaction.
C. It has a minimum frequency limit of one minute.
D. It lacks the capability to cache its state.
C. It has a minimum frequency limit of one minute.

3

, In the context of Windows, what parallels a daemon in Linux by running in the
background without user interaction?

A. Cron job
B. Daemon
C. Service
D. Registry
C. Service
What mechanism can a PenTester use in Windows to ensure a program
automatically starts upon system boot, leveraging the Registry?

A. Cron
B. Daemon
C. Service manipulation
D. Registry modification
D. Registry modification
A PenTester wants to test how easy it is to obtain passwords with physical access
to an organization's offices. What methods can the PenTester use? (Select all that
apply.)

1. Shoulder surfing
2. Fake login websites
3. Meterpreter
4. Hardware-based USB keyloggers

A) 1, 2
B) 2, 3
C) 1, 4
D) 1, 3
C) 1, 4
Which method involves a PenTester watching users as they type passwords to
potentially steal them?

A. Using Meterpreter

4