PT0-003 practice questions 91–100

1. Question 91 · 335 in bank

   Which of the following is the most efficient way to exfiltrate a file containing data that could be sensitive?

   • AUse steganography and send the file over FTP.
   • BCompress the file and send it using TFTP.
   • CSplit the file in tiny pieces and send it over dnscat.
   • DEncrypt and send the file over HTTPS.

   Show answer

   Answer: D

   Next question

2. Question 92 · 335 in bank

   A penetration tester has discovered sensitive files on a system. Assuming exfiltration of the files is part of the scope of the test, which of the following is most likely to evade DLP systems?

   • AEncoding the data and pushing through DNS to the tester's controlled server
   • BPadding the data and uploading the files through an external cloud storage service
   • CObfuscating the data and pushing through FTP to the tester's controlled server
   • DHashing the data and emailing the files to the tester's company inbox

   Show answer

   Answer: A

   Next question

3. Question 93 · 335 in bank

   A penetration tester is testing a power plant's network and needs to avoid disruption to the grid. Which of the following methods is most appropriate to identify vulnerabilities in the network?

   • AConfigure a network scanner engine and execute the scan.
   • BExecute a testing framework to validate vulnerabilities on the devices.
   • CConfigure a port mirror and review the network traffic.
   • DRun a network mapper tool to get an understanding of the devices.

   Show answer

   Answer: C

   Next question

4. Question 94 · 335 in bank

   During a security audit, a penetration tester wants to run a process to gather information about a target network's domain structure and associated IP addresses. Which of the following tools should the tester use?

   • ADnsenum
   • BNmap
   • CNetcat
   • DWireshark

   Show answer

   Answer: A

   Next question

5. Question 95 · 335 in bank

   A penetration tester enumerates a legacy Windows host on the same subnet. The tester needs to select exploit methods that will have the least impact on the host's operating stability. Which of the following commands should the tester try first?

   • Aresponder -I eth0 john responder_output.txt
   • Bhydra -L administrator -P /path/to/pwlist.txt -t 100 rdp://
   • Cmsf > use msf > set msf > set PAYLOAD windows/meterpreter/reverse_tcp msf > run
   • Dpython3 ./buffer_overflow_with_shellcode.py 445

   Show answer

   Answer: A

   Next question

6. Question 96 · 335 in bank

   During an assessment, a penetration tester runs the following command: dnscmd.exe /config /serverlevelplugindll C:\users\netadm\Documents\addusr.dll Which of the following is the penetration tester trying to achieve?

   • ADNS enumeration
   • BPrivilege escalation
   • CCommand injection
   • DA list of available users

   Show answer

   Answer: B

   Next question

7. Question 97 · 335 in bank

   A penetration tester wants to use multiple TTPs to assess the reactions (alerted, blocked, and others) by the client's current security tools. The threat-modeling team indicates the TTPs in the list might effect their internal systems and servers. Which of the following actions would the tester most likely take?

   • AUse a BAS tool to test multiple TTPs based on the input from the threat-modeling team.
   • BPerform an internal vulnerability assessment with credentials to review the internal attack surface.
   • CUse a generic vulnerability scanner to test the TTPs and review the results with the threat-modeling team.
   • DPerform a full internal penetration test to review all the possible exploits that could affect the systems.

   Show answer

   Answer: A

   Next question

8. Question 98 · 335 in bank

   A penetration tester is conducting a vulnerability scan. The tester wants to see any vulnerabilities that may be visible from outside of the organization. Which of the following scans should the penetration tester perform?

   • ASAST
   • BSidecar
   • CUnauthenticated
   • DHost-based

   Show answer

   Answer: C

   Next question

9. Question 99 · 335 in bank

   During a penetration testing engagement, a tester targets the internet-facing services used by the client. Which of the following describes the type of assessment that should be considered in this scope of work?

   • ASegmentation
   • BMobile
   • CExternal
   • DWeb

   Show answer

   Answer: C

   Next question

10. Question 100 · 335 in bank

    A tester wants to pivot from a compromised host to another network with encryption and the least amount of interaction with the compromised host. Which of the following is the best way to accomplish this objective?

    • ACreate a SSH tunnel using sshuttle to forward all the traffic to the compromised computer.
    • BConfigure a VNC server on the target network and access the VNC server from the compromised computer.
    • CSet up a Metasploit listener on the compromised computer and create a reverse shell on the target network.
    • DCreate a Netcat connection to the compromised computer and forward all the traffic to the target network.

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PT0-003 practice, question 91. 335 questions available.