CompTIA PenTest+ PT0-003 - All Domains Penetration Testing Methodology

By Jordan Blake · Updated Jul 10, 2026

Questions25
Passing Score75%
Format100% Multiple Choice
Sessions Logged1,632
Your progressLog in / Register to track times taken, best score, questions mastered, and coverage on this quiz.
Rating
4.3 (36)

Topics covered

This quiz

Uncategorized25 (100%)

Uncategorized25 questions

Browse more · Report this quiz

Question catalog for this preview

Catalog listing of the 5 preview questions for this quiz.

Question 1

A pentester discovers that an internal web application uses `http://app.internal/fetch?url=http://169.254.169.254/latest/meta-data/` and returns AWS instance metadata. What vulnerability is this?

Answer choices

  • A. Path traversal

  • B. SSRF (Server-Side Request Forgery) — the server makes requests on behalf of the attacker to internal endpoints

  • C. SQL injection

  • D. XSS

Question 2

A pentester obtains an NTLM hash for a domain user from a compromised workstation. Without cracking the hash, they use it to authenticate to other systems. What technique is this?

Answer choices

  • A. Rainbow table attack

  • B. Pass-the-Hash (PtH)

  • C. Kerberoasting

  • D. Golden Ticket

Question 3

After completing a penetration test, the tester must restore all systems to their original state. Which of the following actions would be REQUIRED during cleanup?

Answer choices

  • A. Format all compromised systems

  • B. Remove all backdoors, test accounts, uploaded files, and malicious scripts; restore modified configurations; document all changes made

  • C. Submit a vulnerability report only

  • D. Leave backdoors in place for the client to verify

Question 4

During a pentest, a tester uses `msfvenom` to create a reverse shell payload. They embed it in a document. What type of payload delivery is this?

Answer choices

  • A. Network exploit

  • B. Client-side attack / Social engineering lure — an attacker-crafted malicious document that executes when the victim opens it

  • C. Brute-force attack

  • D. SQL injection

Question 5

During a web application test, a pentester injects `' OR '1'='1` into a login form's username field. The application returns "Welcome, admin!" without requiring a password. What vulnerability has been exploited?

Answer choices

  • A. XSS (Cross-Site Scripting)

  • B. CSRF (Cross-Site Request Forgery)

  • C. SQL injection (authentication bypass)

  • D. Path traversal