Which configuration change is most effective in preventing switch spoofing attacks on access ports?

Enable PortFast on all access ports

Implement MAC address filtering on access ports

Disable Dynamic Trunking Protocol (DTP) on all access ports

Set the native VLAN to VLAN 1 on all trunk ports

A penetration tester is assessing a network where the switch ports are configured with static access VLANs and no additional security features. The tester wants to move from the access VLAN to the native VLAN of the trunk link. Which technique should the tester use?

Send a double-tagged 802.1Q frame with the outer tag set to the native VLAN and the inner tag set to the target VLAN.

Use a DHCP starvation attack to exhaust the IP pool and then assign yourself an address in the target VLAN.

Send a single-tagged frame with the target VLAN ID and rely on the switch to forward it to the trunk.

Use DTP to negotiate a trunk with the switch and then send frames tagged with the target VLAN.

A penetration tester is performing an on-path attack on a network that uses both HTTP and HTTPS services. The tester has successfully performed ARP spoofing and can see the victim's traffic. The tester wants to capture credentials from the HTTPS service. Which technique should the tester use?

Use SSL stripping to downgrade the HTTPS connection to HTTP

Use a VLAN hopping attack to reach the server's VLAN and capture traffic directly

Use a DNS spoofing attack to redirect the victim to a fake HTTPS site

Use Wireshark to capture the HTTPS traffic and decrypt it with the server's private key

CompTIAPenTest+

Domain 4Objective 1

Network Attacks PT0-003 Practice Questions (Page 3)

Part of the Attacks and exploits domain, which accounts for 35% of the PT0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~23–39 in this domain), expect 4–7 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

6concepts

35%of the exam

Questions 11–15

11foundation · easy
Which configuration change is most effective in preventing switch spoofing attacks on access ports?
Select an answer first
12foundation · easy
Which tool is specifically designed to detect ARP spoofing and other on-path attacks by monitoring ARP traffic and alerting on anomalies?
Select an answer first
13application · medium
A penetration tester is assessing a network where the switch ports are configured with static access VLANs and no additional security features. The tester wants to move from the access VLAN to the native VLAN of the trunk link. Which technique should the tester use?
Select an answer first
14expert · hard
A penetration tester is performing an on-path attack on a network that uses both HTTP and HTTPS services. The tester has successfully performed ARP spoofing and can see the victim's traffic. The tester wants to capture credentials from the HTTPS service. Which technique should the tester use?
Select an answer first
15foundation · easy
Which attack exploits a vulnerability in a service by sending specially crafted input that is processed by the service, potentially allowing the attacker to execute arbitrary code?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PT0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “PT0-003” is a trademark of its owner, used for identification only.

Network Attacks PT0-003 Practice Questions (Page 3)

Questions 11–15

Which configuration change is most effective in preventing switch spoofing attacks on access ports?

Which tool is specifically designed to detect ARP spoofing and other on-path attacks by monitoring ARP traffic and alerting on anomalies?

A penetration tester is assessing a network where the switch ports are configured with static access VLANs and no additional security features. The tester wants to move from the access VLAN to the native VLAN of the trunk link. Which technique should the tester use?

A penetration tester is performing an on-path attack on a network that uses both HTTP and HTTPS services. The tester has successfully performed ARP spoofing and can see the victim's traffic. The tester wants to capture credentials from the HTTPS service. Which technique should the tester use?

Which attack exploits a vulnerability in a service by sending specially crafted input that is processed by the service, potentially allowing the attacker to execute arbitrary code?

Keep studying — Attacks and exploits