Which of the following is a recommended mitigation against double tagging VLAN hopping attacks?

Set the native VLAN to an unused VLAN ID on trunk ports

Use VLAN 1 as the native VLAN on all trunk ports

A penetration tester is assessing a network that has a database server with a default administrator password. Which technique is most likely to be used to gain access to the database?

Perform a VLAN hopping attack to reach the database server

Launch a denial-of-service attack against the database service

Use the default credentials to log in directly

Use ARP spoofing to intercept database queries

Which of the following is a primary defense against buffer overflow attacks on network services?

Implementing network segmentation

Applying security patches and updates

A company has a web server that was recently compromised due to an unpatched vulnerability. The security team wants to prevent similar attacks in the future. Which action is the most effective?

Change the web server's IP address

Use a different web server software

Disable the web server's network access

Implement a patch management process to ensure timely updates

Which practice is most effective in preventing SQL injection attacks against a web application?

Encrypting database connections

Using a web application firewall (WAF)

CompTIAPenTest+

Domain 4Objective 1

Network Attacks PT0-003 Practice Questions (Page 1)

Part of the Attacks and exploits domain, which accounts for 35% of the PT0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~23–39 in this domain), expect 4–7 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

6concepts

35%of the exam

Questions 1–5

1foundation · easy
Which of the following is a recommended mitigation against double tagging VLAN hopping attacks?
Select an answer first
2application · medium
A penetration tester is assessing a network that has a database server with a default administrator password. Which technique is most likely to be used to gain access to the database?
Select an answer first
3foundation · easy
Which of the following is a primary defense against buffer overflow attacks on network services?
Select an answer first
4application · medium
A company has a web server that was recently compromised due to an unpatched vulnerability. The security team wants to prevent similar attacks in the future. Which action is the most effective?
Select an answer first
5foundation · easy
Which practice is most effective in preventing SQL injection attacks against a web application?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PT0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “PT0-003” is a trademark of its owner, used for identification only.