PT0-003 practice questions 191–200

1. Question 191 · 335 in bank

   Which of the following protocols would a penetration tester most likely utilize to exfiltrate data covertly and evade detection?

   • AFTP
   • BHTTP
   • CSMTP
   • DDNS

   Show answer

   Answer: D

   Next question

2. Question 192 · 335 in bank

   Which of the following should be included in a penetration test report to support the tester's detailed findings?

   • AMethodologies
   • BScreenshots
   • CVulnerabilities
   • DRemediations

   Show answer

   Answer: B

   Next question

3. Question 193 · 335 in bank

   During a penetration test, a junior tester uses Hunter.io for an assessment and plans to review the information that will be collected. Which of the following describes the information the junior tester will receive from the Hunter.io tool?

   • AA collection of email addresses for the target domain that is available on multiple sources on the internet
   • BDNS records for the target domain and subdomains that could be used to increase the external attack surface
   • CData breach information about the organization that could be used for additional enumeration
   • DInformation from the target's main web page that collects usernames, metadata, and possible data exposures

   Show answer

   Answer: A

   Next question

4. Question 194 · 335 in bank

   A penetration tester wants to download sensitive files stored on the client's file server and runs the following scan:

   

   Which of the following TCP ports should the penetration tester target as a next step?

   • A21
   • B22
   • C80
   • D990

   Show answer

   Answer: D

   Next question

5. Question 195 · 335 in bank

   A penetration tester enters an invalid user ID on the login page of a web application. The tester receives a message indicating the user is not found. Then, the tester tries a valid user ID but an incorrect password, but the web application indicates the password is invalid. Which of the following should the tester attempt next?

   • AError log analysis
   • BDoS attack
   • CEnumeration
   • DPassword dictionary attack

   Show answer

   Answer: C

   Next question

6. Question 196 · 335 in bank

   A penetration tester is conducting an IoT assessment and dumps the device firmware to a Linux machine. Which of the following Bash scripts would locate secrets in a custom binary executable downloaded from the device?

   • Acat initializedevice | strings | grep -i “password\|shadow\|token”
   • Bcat initializedevice | dos2unix | grep -i “password\|shadow\|token”
   • Ccat initializedevice | base64 -d | grep -i “password\|shadow\|token”
   • Dcat initializedevice | grep -i “password\|shadow\|token”

   Show answer

   Answer: A

   Next question

7. Question 197 · 335 in bank

   After completing vulnerability scans for a given test, a penetration tester needs to prioritize which potential assets are in scope and should be exploited first. Given the following scanner output:

   

   Which of the following findings should the tester prioritize first based upon a consideration of risk to the organization?

   • A1
   • B2
   • C3
   • D4

   Show answer

   Answer: B

   Next question

8. Question 198 · 335 in bank

   A penetration tester uses a Python script to enumerate open ports across a list of IP addresses. The current script runs sequentially, which slows it down during larger engagements. The tester wants to improve the script’s performance so it can handle multiple targets simultaneously. Which of the following changes is the best way to achieve this goal?

   • AUsing the time.sleep() function to throttle the scanning rate
   • BImporting a library that allows use of workers
   • CReplacing the range() function with a while loop
   • DChanging the port list from a tuple to a dictionary for better lookup speed

   Show answer

   Answer: B

   Next question

9. Question 199 · 335 in bank

   A penetration tester sets up a C2 server to manage and control payloads deployed in the target network. Which of the following tools is the most suitable for establishing a robust and stealthy connection?

   • AProxyChains
   • BCovenant
   • CPsExec
   • Dsshuttle

   Show answer

   Answer: B

   Next question

10. Question 200 · 335 in bank

    A penetration tester obtains a regular domain user’s set of credentials. The tester wants to attempt a dictionary attack by creating a custom word list based on the Active Directory password policy. Which of the following tools should the penetration tester use to retrieve the password policy?

    • AResponder
    • BCrackMapExec
    • CHydra
    • Dmsfvenom

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PT0-003 practice, question 191. 335 questions available.