Free Access CompTIA PT0-001 New Release

CompTIA PenTest+ Exam Questions and Answers

Question 29

Consumer-based IoT devices are often less secure than systems built for traditional desktop computers.

Which of the following BEST describes the reasoning for this?

Manufacturers developing IoT devices are less concerned with security.

It is difficult for administrators to implement the same security standards across the board.

IoT systems often lack the hardware power required by more secure solutions.

Regulatory authorities often have lower security requirements for IoT systems.

Question 30

Which of the following BEST describes some significant security weaknesses with an ICS, such as those used

in electrical utility facilities, natural gas facilities, dams, and nuclear facilities?

ICS vendors are slow to implement adequate security controls.

ICS staff are not adequately trained to perform basic duties.

There is a scarcity of replacement equipment for critical devices.

There is a lack of compliance for ICS facilities.

Question 31

A penetration tester is planning to conduct a distributed dictionary attack on a government domain against the

threat actors will be emulated?

APT

Hacktivist

Script kiddie

Insider threat

Question 32

While trying to maintain persistence on a Windows system with limited privileges, which of the following

registry keys should the tester use?

HKEY_CLASSES_ROOT

HKEY_LOCAL_MACHINE

HKEY_CURRENT_USER

HKEY_CURRENT_CONFIG