PT0-003 practice questions 221–230

1. Question 221 · 335 in bank

   A penetration tester needs to quickly transfer an exploit from a Linux system to a Windows 10 system within the network. Which of the following is the best way to accomplish this task?

   • Anc -lvp 8080
   • Bnc -lnvp 443
   • Cpython3 -m http.server 80
   • Dneat -lvp 8080

   Show answer

   Answer: C

   Next question

2. Question 222 · 335 in bank

   A penetration tester downloads a JAR file that is used in an organization’s production environment. The tester evaluates the contents of the JAR file to identify potentially vulnerable components that can be targeted for exploit. Which of the following describes the tester's activities?

   • ASAST
   • BSBOM
   • CICS
   • DSCA

   Show answer

   Answer: D

   Next question

3. Question 223 · 335 in bank

   During a wireless penetration assessment for a small business client, a tester attempts to capture wireless packets. However, whenever the tester sets the capture device to monitor mode, it fails to see the client's wireless network, as provided by the scope. Which of the following is the most likely reason for this issue?

   • AThe clients network uses 6GHz and not 5GHz/2.4GHz
   • BThe tester misconfigured the capture device
   • CThe client provided the wrong SSID for the network
   • DThe tester is not using Aircrack-ng

   Show answer

   Answer: A

   Next question

4. Question 224 · 335 in bank

   A tester compromises a target host and then wants to maintain persistent access. Which of the following is the best way for the attacker to accomplish the objective?

   • AConfigure and register a service
   • BInstall and run remote desktop software
   • CSet up a script to be run when users log in.
   • DPerform a kerberoasting attack on the host

   Show answer

   Answer: A

   Next question

5. Question 225 · 335 in bank

   A penetration tester obtains network-level access to a hardened subnet that has no Windows-based hosts and needs to find credentials. The client mentioned that the SOC is only monitoring user endpoints and not servers. Which of the following commands should the tester use?

   • Apwinspector -i -o -m 8 -M 16 -1 -u -n -p
   • Bresponder -I eth0
   • Cnmap -sV -n -T3 -p 22 --reason
   • Dhydra -L root -P /path/to/wordlist -t 3 -M

   Show answer

   Answer: D

   Next question

6. Question 226 · 335 in bank

   A penetration tester accesses and enumerates a host and then runs the following commands: $ runlevel $ ls -l /etc/rc5.d $ vi /etc/rc5.d/S01ssh.dd Which of the following is the tester most likely attempting to do?

   • AFind credentials within the SSH daemon
   • BEstablish persistence on the host
   • CAdd a key to the host for SSH.
   • DHarvest users' private keys.

   Show answer

   Answer: B

   Next question

7. Question 227 · 335 in bank

   A penetration testing company is defining the rules of engagement with a client. Which of the following should the company include?

   • ANon-disclosure agreement
   • BEscalation process
   • CURL list
   • DAuthorization letter

   Show answer

   Answer: B

   Next question

8. Question 228 · 335 in bank

   Which of the following differentiates MITRE ATT&CK from PTES?

   • AMITRE ATT&CK emphasizes real-world adversary behavior patterns, while PTES outlines structured test phases
   • BMITRE ATT&CK defines risk scoring models for vulnerabilities, while PTES focuses on defensive controls.
   • CMITRE ATT&CK organizes asset inventories, while PTES provides data breach response procedures
   • DMITRE ATT&CK provides detailed exploit code samples, while PTES focuses on threat actor profiles

   Show answer

   Answer: A

   Next question

9. Question 229 · 335 in bank

   A company's incident response team determines that a breach occurred because a penetration tester left a web shell. Which of the following should the penetration tester have done after the engagement?

   • AEnable a host-based firewall on the machine
   • BRemove utilized persistence mechanisms on client systems
   • CRevert configuration changes made during the engagement
   • DTurn off command-and-control infrastructure

   Show answer

   Answer: B

   Next question

10. Question 230 · 335 in bank

    A penetration tester gained a foothold within a network. The penetration tester needs to enumerate all users within the domain. Which of the following is the best way to accomplish this task?

    • Apwd.exe
    • Bnet.exe
    • Csc.ехе
    • Dmsconfig.exe

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PT0-003 practice, question 221. 335 questions available.