PT0-003 practice questions 121–130

1. Question 121 · 335 in bank

   A penetration tester runs a network scan but has some issues accurately enumerating the vulnerabilities due to the following error: OS identification failed - Which of the following is most likely causing this error?

   • AThe scan did not reach the target because of a firewall block rule.
   • BThe scanner database is out of date.
   • CThe scan is reporting a false positive.
   • DThe scan cannot gather one or more fingerprints from the target.

   Show answer

   Answer: D

   Next question

2. Question 122 · 335 in bank

   A penetration tester performs an assessment on the target company's Kubernetes cluster using kube-hunter. Which of the following types of vulnerabilities could be detected with the tool?

   • ANetwork configuration errors in Kubernetes services
   • BWeaknesses and misconfigurations in the Kubernetes cluster
   • CApplication deployment issues in Kubernetes
   • DSecurity vulnerabilities specific to Docker containers

   Show answer

   Answer: B

   Next question

3. Question 123 · 335 in bank

   During a security assessment, a penetration tester wants to compromise user accounts without triggering IDS/IPS detection rules. Which of the following is the most effective way for the tester to accomplish this task?

   • ACrack user accounts using compromised hashes.
   • BBrute force accounts using a dictionary attack.
   • CBypass authentication using SQL injection.
   • DCompromise user accounts using a XSS attack.

   Show answer

   Answer: A

   Next question

4. Question 124 · 335 in bank

   During a penetration test, a tester attempts to pivot from one Windows 10 system to another Windows system. The penetration tester thinks a local firewall is blocking connections. Which of the following command-line utilities built into Windows is most likely to disable the firewall?

   • Acertutil.exe
   • Bbitsadmin.exe
   • Cmsconfig.exe
   • Dnetsh.exe

   Show answer

   Answer: D

   Next question

5. Question 125 · 335 in bank

   During an engagement, a penetration tester runs the following command against the host system: host -t axfr domain.com dnsl.domain.com Which of the following techniques best describes what the tester is doing?

   • AZone transfer
   • BHost enumeration
   • CDNS poisoning
   • DDNS query

   Show answer

   Answer: A

   Next question

6. Question 126 · 335 in bank

   Select 2

   Which of the following are valid reasons for including base, temporal, and environmental CVSS metrics in the findings section of a penetration testing report? (Choose two.)

   • AProviding details on how to remediate vulnerabilities
   • BHelping to prioritize remediation based on threat context
   • CIncluding links to the proof-of-concept exploit itself
   • DProviding information on attack complexity and vector
   • EPrioritizing compliance information needed for an audit
   • FAdding risk levels to each asset

   Show answer

   Answer: BD

   Next question

7. Question 127 · 335 in bank

   During an assessment, a penetration tester plans to gather metadata from various online files, including pictures. Which of the following standards outlines the formats for pictures, audio, and additional tags that facilitate this type of reconnaissance?

   • AEXIF
   • BGIF
   • CCOFF
   • DELF

   Show answer

   Answer: A

   Next question

8. Question 128 · 335 in bank

   A penetration tester needs to exploit a vulnerability in a wireless network that has weak encryption in order to perform traffic analysis and decrypt sensitive information. Which of the following techniques would best allow the penetration tester to have access to the sensitive information?

   • ABluejacking
   • BSSID spoofing
   • CPacket sniffing
   • DARP poisoning

   Show answer

   Answer: C

   Next question

9. Question 129 · 335 in bank

   A penetration tester wants to check the security awareness of specific workers in the company with targeted attacks. Which of the following attacks should the penetration tester perform?

   • APhishing
   • BTailgating
   • CWhailing
   • DSpear phising

   Show answer

   Answer: D

   Next question

10. Question 130 · 335 in bank

    During a penetration test, a tester compromises a Windows computer. The tester executes the following command and receives the following output: mimikatz # privilege::debug mimikatz # lsadump::cache -Output--- lapsUser 27dh9128361tsg264592101387541j --OutputEnd-- Which of the following best describes what the tester plans to do by executing the command?

    • AThe tester plans to perform the first step to execute a Golden Ticket attack to compromise the Active Directory domain.
    • BThe tester plans to collect application passwords or hashes to compromise confidential information within the local computer.
    • CThe tester plans to use the hash collected to perform lateral movement to other computers using a local administrator hash.
    • DThe tester plans to collect the ticket information from the user to perform a Kerberoasting attack on the domain controller.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PT0-003 practice, question 121. 335 questions available.