A network administrator suspects an on-path attack is occurring on the corporate network. Which tool should the administrator use to detect ARP spoofing?

Netcat to test connectivity to the gateway

Traceroute to identify the path to the gateway

Nmap to scan for open ports on the attacker's machine

Wireshark to capture and analyze ARP traffic for duplicate or unexpected replies

A company runs a legacy application that requires SMBv1 on a single internal server. The security team wants to reduce the risk of service exploitation without breaking the application. Which action is the most appropriate?

Enable SMB signing and require it for all connections

Expose the server to the internet to allow remote access for maintenance

Disable SMBv1 on the server and require all clients to use SMBv2

Isolate the server on a separate VLAN and restrict access with firewall rules to only the required clients

A penetration tester is on the access VLAN of a switch that has a trunk port with the native VLAN set to VLAN 10. The tester wants to intercept traffic between two servers on VLAN 20. Which approach would be most effective?

Use DHCP starvation to exhaust the IP pool and then assign yourself an address in VLAN 20

Perform a double-tagging attack to send frames to VLAN 20 and then use ARP spoofing to redirect traffic

Use DTP to negotiate a trunk and then access VLAN 20 directly

Use MAC flooding to cause the switch to send all traffic to the tester

A penetration tester is performing an on-path attack on a network that uses both wired and wireless connections. The tester has successfully performed ARP spoofing on the wired network. The tester wants to intercept traffic from a wireless client that is connected to the same network. Which technique should the tester use?

Perform ARP spoofing on the wireless client's subnet as well

Use a rogue access point to force the client to connect to the tester

Use a denial-of-service attack to disconnect the wireless client

Use a VLAN hopping attack to reach the wireless client's VLAN

A penetration tester is assessing a network that has a legacy FTP server with a known vulnerability. The tester wants to exploit the vulnerability to gain access to the server. However, the server is behind a firewall that only allows FTP traffic. Which technique should the tester use?

Use ARP spoofing to intercept FTP credentials

Use the FTP service to upload a malicious file and then execute it via a command injection vulnerability

Perform a VLAN hopping attack to bypass the firewall

Use a denial-of-service attack to crash the FTP service

CompTIAPenTest+

Domain 4Objective 1

Network Attacks PT0-003 Practice Questions (Page 5)

Part of the Attacks and exploits domain, which accounts for 35% of the PT0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~23–39 in this domain), expect 4–7 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

6concepts

35%of the exam

Questions 21–25

21application · medium
A network administrator suspects an on-path attack is occurring on the corporate network. Which tool should the administrator use to detect ARP spoofing?
Select an answer first
22application · medium
A company runs a legacy application that requires SMBv1 on a single internal server. The security team wants to reduce the risk of service exploitation without breaking the application. Which action is the most appropriate?
Select an answer first
23expert · hard
A penetration tester is on the access VLAN of a switch that has a trunk port with the native VLAN set to VLAN 10. The tester wants to intercept traffic between two servers on VLAN 20. Which approach would be most effective?
Select an answer first
24expert · hard
A penetration tester is performing an on-path attack on a network that uses both wired and wireless connections. The tester has successfully performed ARP spoofing on the wired network. The tester wants to intercept traffic from a wireless client that is connected to the same network. Which technique should the tester use?
Select an answer first
25expert · hard
A penetration tester is assessing a network that has a legacy FTP server with a known vulnerability. The tester wants to exploit the vulnerability to gain access to the server. However, the server is behind a firewall that only allows FTP traffic. Which technique should the tester use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PT0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “PT0-003” is a trademark of its owner, used for identification only.