A security analyst is investigating a report of slow network performance and sees an ARP table entry on a workstation that maps the default gateway's IP address to an unknown MAC address. Which type of attack is most likely occurring?

ARP spoofing to perform an on-path attack

MAC flooding to cause a switch to fail open

DNS cache poisoning to redirect traffic

VLAN hopping to gain access to the management VLAN

A security analyst is investigating a potential on-path attack. The analyst notices that the ARP cache on a workstation shows the gateway's IP address mapped to a MAC address that is not the actual gateway. The analyst also sees that the workstation is sending traffic to an unknown IP address. Which tool would be most effective in confirming the attack?

Use Nmap to scan the unknown IP address for open ports

Use ping to test connectivity to the gateway

Use netstat to view active connections

Use Wireshark to capture ARP traffic and look for multiple replies for the same IP

A penetration tester is targeting a Windows server that is running an outdated SMBv1 service. Which technique is most likely to be effective in gaining initial access?

Exploit a known remote code execution vulnerability in SMBv1, such as EternalBlue

Perform a VLAN hopping attack to reach the server's management interface

Launch a denial-of-service attack against the SMB service to cause a crash

Use ARP spoofing to intercept credentials during SMB authentication

CompTIAPenTest+

Domain 4Objective 1

Network Attacks PT0-003 Practice Questions (Page 4)

Part of the Attacks and exploits domain, which accounts for 35% of the PT0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~23–39 in this domain), expect 4–7 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

6concepts

35%of the exam

Questions 16–20

16application · medium
A security analyst is investigating a report of slow network performance and sees an ARP table entry on a workstation that maps the default gateway's IP address to an unknown MAC address. Which type of attack is most likely occurring?
Select an answer first
17foundation · easy
An attacker sends a frame with two 802.1Q VLAN tags to a switch. The switch strips the outer tag and forwards the frame to the VLAN specified in the inner tag, even if that VLAN is not normally accessible from the attacker's port. Which VLAN hopping technique does this describe?
Select an answer first
18expert · hard
A security analyst is investigating a potential on-path attack. The analyst notices that the ARP cache on a workstation shows the gateway's IP address mapped to a MAC address that is not the actual gateway. The analyst also sees that the workstation is sending traffic to an unknown IP address. Which tool would be most effective in confirming the attack?
Select an answer first
19foundation · easy
Which method is used to exploit a web service by injecting malicious SQL statements into a query, potentially allowing unauthorized data access?
Select an answer first
20application · medium
A penetration tester is targeting a Windows server that is running an outdated SMBv1 service. Which technique is most likely to be effective in gaining initial access?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PT0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “PT0-003” is a trademark of its owner, used for identification only.

Network Attacks PT0-003 Practice Questions (Page 4)

Questions 16–20

A security analyst is investigating a report of slow network performance and sees an ARP table entry on a workstation that maps the default gateway's IP address to an unknown MAC address. Which type of attack is most likely occurring?

An attacker sends a frame with two 802.1Q VLAN tags to a switch. The switch strips the outer tag and forwards the frame to the VLAN specified in the inner tag, even if that VLAN is not normally accessible from the attacker's port. Which VLAN hopping technique does this describe?

Which method is used to exploit a web service by injecting malicious SQL statements into a query, potentially allowing unauthorized data access?

A penetration tester is targeting a Windows server that is running an outdated SMBv1 service. Which technique is most likely to be effective in gaining initial access?

Keep studying — Attacks and exploits