A company has a web server that is exposed to the internet. The security team wants to reduce the risk of service exploitation. Which combination of measures is the most effective?

Implement a web application firewall (WAF) and keep the server patched

Disable the web server's network access

Change the web server's IP address regularly

Use a different web server software

In an on-path attack, what is the primary role of the attacker's system?

To passively monitor network traffic without altering it

To overload the target with traffic to cause denial of service

To scan for open ports on the target system

To intercept and potentially modify communications between two parties

Which of the following is a common indicator that an on-path attack may be occurring on a network?

An increase in DNS queries to external servers

A high number of TCP SYN packets sent to a single port

A sudden increase in ARP replies from a single MAC address for multiple IP addresses

A security analyst is reviewing network traffic and notices that the MAC address of the default gateway changes frequently. Which tool can the analyst use to confirm that an on-path attack is occurring?

Use netstat to view active connections

Use ping to test connectivity to the gateway

Use Wireshark to filter for ARP packets and look for multiple replies for the same IP address

Use Nmap to scan the gateway for open ports

CompTIAPenTest+

Domain 4Objective 1

Network Attacks PT0-003 Practice Questions (Page 2)

Part of the Attacks and exploits domain, which accounts for 35% of the PT0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~23–39 in this domain), expect 4–7 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

6concepts

35%of the exam

Questions 6–10

6expert · hard
A company has a web server that is exposed to the internet. The security team wants to reduce the risk of service exploitation. Which combination of measures is the most effective?
Select an answer first
7foundation · easy
In an on-path attack, what is the primary role of the attacker's system?
Select an answer first
8foundation · easy
Which attack technique involves an attacker configuring a workstation to spoof a switch's Dynamic Trunking Protocol (DTP) messages in order to establish a trunk link and gain access to traffic from multiple VLANs?
Select an answer first
9foundation · easy
Which of the following is a common indicator that an on-path attack may be occurring on a network?
Select an answer first
10application · medium
A security analyst is reviewing network traffic and notices that the MAC address of the default gateway changes frequently. Which tool can the analyst use to confirm that an on-path attack is occurring?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PT0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “PT0-003” is a trademark of its owner, used for identification only.