Verified PT0-002 dumps Q&As - Pass Guarantee Exam Dumps Test Engine [2021]
PT0-002 dumps and 112 unique questions
NEW QUESTION 55
A penetration tester runs the unshadow command on a machine. Which of the following tools will the tester most likely use NEXT?
- A. Cain and Abel
- B. John the Ripper
- C. Mimikatz
- D. Hydra
Answer: B
NEW QUESTION 56
A client has requested that the penetration test scan include the following UDP services: SNMP, NetBIOS, and DNS. Which of the following Nmap commands will perform the scan?
- A. nmap -vv sUV -p 53,137-139,161-162 10.10.1.20/24 -oA udpscan
- B. nmap -vv sUV -p 53, 122-123, 160-161 10.10.1.20/24 -oA udpscan
- C. nmap -vv sUV -p 53,123,161-162 10.10.1.20/24 -oA udpscan
- D. nmap -vv sUV -p 53, 123-159 10.10.1.20/24 -oA udpscan
Answer: C
NEW QUESTION 57
When developing a shell script intended for interpretation in Bash, the interpreter /bin/bash should be explicitly specified. Which of the following character combinations should be used on the first line of the script to accomplish this goal?
- A. ##
- B. #$
- C. #!
- D. <#
- E. <$
Answer: B
NEW QUESTION 58
A red-team tester has been contracted to emulate the threat posed by a malicious insider on a company's network, with the constrained objective of gaining access to sensitive personnel files. During the assessment, the red-team tester identifies an artifact indicating possible prior compromise within the target environment.
Which of the following actions should the tester take?
- A. Incorporate the newly identified method of compromise into the red team's approach.
- B. Perform forensic analysis to isolate the means of compromise and determine attribution.
- C. Create a detailed document of findings before continuing with the assessment.
- D. Halt the assessment and follow the reporting procedures as outlined in the contract.
Answer: C
NEW QUESTION 59
A penetration tester who is conducting a vulnerability assessment discovers that ICMP is disabled on a network segment. Which of the following could be used for a denial-of-service attack on the network segment?
- A. Ping of death
- B. Smurf
- C. Ping flood
- D. Fraggle
Answer: B
NEW QUESTION 60
Which of the following BEST describe the OWASP Top 10? (Choose two.)
- A. A risk-governance and compliance framework
- B. A checklist of Apache vulnerabilities
- C. The risks defined in order of importance
- D. The most critical risks of web applications
- E. A list of all the risks of web applications
- F. A web-application security standard
Answer: C,D
NEW QUESTION 61
A penetration tester has been contracted to review wireless security. The tester has deployed a malicious wireless AP that mimics the configuration of the target enterprise WiFi. The penetration tester now wants to try to force nearby wireless stations to connect to the malicious AP. Which of the following steps should the tester take NEXT?
- A. Modify the malicious AP configuration to not use a pre-shared key.
- B. Perform jamming on all 2.4GHz and 5GHz channels.
- C. Set the malicious AP to broadcast within dynamic frequency selection channels.
- D. Send deauthentication frames to the stations.
Answer: C
NEW QUESTION 62
Running a vulnerability scanner on a hybrid network segment that includes general IT servers and industrial control systems:
- A. may reduce the true positive rate of findings.
- B. may cause unintended failures in control systems.
- C. will create a denial-of-service condition on the IP networks.
- D. will reveal vulnerabilities in the Modbus protocol.
Answer: B
NEW QUESTION 63
A penetration tester has obtained root access to a Linux-based file server and would like to maintain persistence after reboot. Which of the following techniques would BEST support this objective?
- A. Run the nc -e /bin/sh <...> command.
- B. Obtain /etc/shadow and brute force the root password.
- C. Move laterally to create a user account on LDAP
- D. Create a one-shot systemd service to establish a reverse shell.
Answer: A
NEW QUESTION 64
Which of the following types of information should be included when writing the remediation section of a penetration test report to be viewed by the systems administrator and technical staff?
- A. The executive summary and information regarding the testing company
- B. Information regarding the business impact if compromised
- C. The rules of engagement from the assessment
- D. A quick description of the vulnerability and a high-level control to fix it
Answer: B
NEW QUESTION 65
A penetration tester finds a PHP script used by a web application in an unprotected internal source code repository. After reviewing the code, the tester identifies the following:
Which of the following tools will help the tester prepare an attack for this scenario?
- A. Burp Suite and DIRB
- B. Netcat and cURL
- C. Hydra and crunch
- D. Nmap and OWASP ZAP
Answer: C
NEW QUESTION 66
A penetration tester exploited a unique flaw on a recent penetration test of a bank. After the test was completed, the tester posted information about the exploit online along with the IP addresses of the exploited machines. Which of the following documents could hold the penetration tester accountable for this action?
- A. ROE
- B. MSA
- C. NDA
- D. SLA
Answer: C
NEW QUESTION 67
A company is concerned that its cloud VM is vulnerable to a cyberattack and proprietary data may be stolen. A penetration tester determines a vulnerability does exist and exploits the vulnerability by adding a fake VM instance to the IaaS component of the client's VM. Which of the following cloud attacks did the penetration tester MOST likely implement?
- A. Malware injection
- B. Direct-to-origin
- C. Cross-site scripting
- D. Credential harvesting
Answer: B
NEW QUESTION 68
A penetration tester recently completed a review of the security of a core network device within a corporate environment. The key findings are as follows:
* The following request was intercepted going to the network device:
GET /login HTTP/1.1
Host: 10.50.100.16
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Firefox/31.0 Accept-Language: en-US,en;q=0.5 Connection: keep-alive Authorization: Basic WU9VUilOQU1FOnNlY3JldHBhc3N3b3jk
* Network management interfaces are available on the production network.
* An Nmap scan returned the following:
Which of the following would be BEST to add to the recommendations section of the final report? (Choose two.)
- A. Disable HTTP/301 redirect configuration.
- B. Eliminate network management and control interfaces.
- C. Enforce enhanced password complexity requirements.
- D. Create an out-of-band network for management.
- E. Disable or upgrade SSH daemon.
- F. Implement a better method for authentication.
Answer: A,F
NEW QUESTION 69
A penetration tester runs the following command on a system:
find / -user root -perm -4000 -print 2>/dev/null
Which of the following is the tester trying to accomplish?
- A. Find files that were created during exploitation and move them to /dev/null
- B. Find the /root directory on the system
- C. Set the SGID on all files in the / directory
- D. Find files with the SUID bit set
Answer: A
NEW QUESTION 70
A penetration tester who is conducting a web-application test discovers a clickjacking vulnerability associated with a login page to financial dat a. Which of the following should the tester do with this information to make this a successful exploit?
- A. Conduct a watering-hole attack.
- B. Use BeEF.
- C. Perform XSS.
- D. Use browser autopwn.
Answer: C
NEW QUESTION 71
A penetration tester wants to perform reconnaissance without being detected. Which of the following activities have a MINIMAL chance of detection? (Choose two.)
- A. Open-source research
- B. Traffic sniffing
- C. A vulnerability scan
- D. An Nmap scan
- E. A ping sweep
- F. Port knocking
Answer: C,D
NEW QUESTION 72
A company is concerned that its cloud service provider is not adequately protecting the VMs housing its software development. The VMs are housed in a datacenter with other companies sharing physical resources. Which of the following attack types is MOST concerning to the company?
- A. Side channel
- B. Session riding
- C. Data flooding
- D. Cybersquatting
Answer: B
NEW QUESTION 73
During a penetration-testing engagement, a consultant performs reconnaissance of a client to identify potential targets for a phishing campaign. Which of the following would allow the consultant to retrieve email addresses for technical and billing contacts quickly, without triggering any of the client's cybersecurity tools? (Choose two.)
- A. Phishing company employees
- B. Scraping social media sites
- C. Using the WHOIS lookup tool
- D. Utilizing DNS lookup tools
- E. Crawling the client's website
- F. Conducting wardriving near the client facility
Answer: C,E
NEW QUESTION 74
......
PT0-002 Dumps for Pass Guaranteed - Pass PT0-002 Exam: https://www.trainingquiz.com/PT0-002-practice-quiz.html
PT0-002 Exam Dumps - Try Best PT0-002 Exam Questions: https://drive.google.com/open?id=1ODHr2dVjgnSz6xeIRvxLqOEo8Eb2TiPD
