Official Bank
0/331
Page
1/4
CompTIA PenTest+ Exam (PT0-003) - CompTIA Exam Questions
Last updated on June 20, 2026
97%
Exam Compliance
331
Total Questions
1
Question
A penetration tester has adversely affected a critical system during an engagement, which could have a material impact on the organization. Which of the following should the penetration tester do to address this issue?
Options
A
Follow the escalation process.
B
Select the target.
C
Restore the configuration.
D
Perform a BIA.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
2
Question
A penetration tester finished a security scan and uncovered numerous vulnerabilities on several hosts. Based on the targets’ EPSS and CVSS scores, which of the following targets is the most likely to get attacked?
Options
A
Target 3: EPSS Score = 0.6 and CVSS Score = 1
B
Target 4: EPSS Score = 0.4 and CVSS Score = 4.5
C
Target 1: EPSS Score = 0.6 and CVSS Score = 4
D
Target 2: EPSS Score = 0.3 and CVSS Score = 2
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
3
Question
During an assessment, a penetration tester runs the following command: dnscmd.exe /config /serverlevelplugindll C:\users\necad-TA\Documents\adduser.dll
Which of the following is the penetration tester trying to achieve?
Which of the following is the penetration tester trying to achieve?
Options
A
Command injection
B
A list of available users
C
DNS enumeration
D
Privilege escalation
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
4
Question
A penetration tester has found a web application that is running on a cloud virtual machine instance. Vulnerability scans show a potential SSRF for the same application URL path with an injectable parameter. Which of the following commands should the tester run to successfully test for secrets exposure exploitability?
Options
A
curl '?param=