Free CompTIA PenTest+ (PT0-003) Practice Questions

Sample PT0-003 Practice Questions

Browse all 4 free CompTIA PenTest+ practice questions below.

1. A penetration tester is preparing to conduct a black box assessment for a financial services company. The client has requested a comprehensive test of their external-facing web applications and network infrastructure. Which of the following documents should the penetration tester ensure are signed and in place BEFORE beginning any testing activities? (Select TWO)

   • Penetration Test Report
   • Common Vulnerability Scoring System (CVSS) Framework
   • Incident Response Plan
   • Rules of Engagement (RoE)
   • Master Service Agreement (MSA)

2. A penetration tester is preparing to conduct an external assessment for a healthcare organization. During the scoping meeting, the client mentions they must maintain HIPAA compliance. Which of the following should the penetration tester include in the Rules of Engagement?

   • A waiver stating that all HIPAA regulations are suspended during the test
   • Acknowledgment that testing will be conducted in compliance with HIPAA requirements and restrictions on handling PHI (Protected Health Information)
   • Ignore HIPAA since penetration testing is exempt from compliance requirements
   • Permission to share any discovered PHI with third parties for validation

3. During the pre-engagement phase, a penetration tester is reviewing the scope document with a client who operates a critical infrastructure network. The client wants to ensure that testing does not impact production systems. Which of the following should the penetration tester include in the Rules of Engagement to address this concern?

   • Require the client to shut down all production systems before testing begins
   • Exclude all production systems from the scope and test only development environments
   • Proceed with full-scope testing without restrictions to ensure comprehensive coverage
   • Define specific testing windows during off-peak hours and establish a communication protocol for emergency停止

4. A penetration tester is conducting a network scan and discovers a server running SSH on port 22 with password authentication enabled. Which of the following would be the MOST effective method to test for weak credentials?

   • Perform a man-in-the-middle attack to capture SSH credentials in transit
   • Use Nmap NSE scripts to exploit a buffer overflow in the SSH service
   • Use Hydra with a common username and password wordlist to perform a brute-force attack
   • Deploy a packet sniffer to capture SSH handshake packets and crack them offline