PT0-003 practice questions 241–250

1. Question 241 · 335 in bank

   A penetration tester observes an employee logging in to their laptop. The penetration tester wants to gain access to information with the least intervention. Which of the following actions should the penetration tester take?

   • ASend a smishing message.
   • BUtilize a USB hardware keylogger.
   • CSend a phishing email to the employee.
   • DEngage in shoulder surfing.

   Show answer

   Answer: D

   Next question

2. Question 242 · 335 in bank

   Select 2

   A penetration tester is evaluating a company's cybersecurity preparedness. The tester wants to acquire valid credentials using a social engineering campaign. Which of the following tools and techniques are most applicable in this scenario? (Choose two.)

   • ATruffleHog for collecting credentials
   • BShodan for identifying potential targets
   • CGophish for sending phishing emails
   • DMaltego for organizing targets
   • EtheHarvester for discovering additional targets
   • FEvilginx for handling legitimate authentication requests through a proxy

   Show answer

   Answer: CF

   Next question

3. Question 243 · 335 in bank

   Which of the following would most likely reduce the possibility of a client rejecting the final deliverable for a penetration test?

   • AGoal reprioritization
   • BStakeholder alignment
   • CNon-disclosure agreement
   • DBusiness impact analysis

   Show answer

   Answer: B

   Next question

4. Question 244 · 335 in bank

   A penetration tester attempts to access a domain-joined Windows file server that requires authentication for access. Which of the following will most likely assist in gaining access?

   • AIntercept proxy chains with tcpdump.
   • BCreate a reverse shell payload with msfvenom.
   • CGenerate a silver ticket with Impacket.
   • DConduct a relay attack using Responder.

   Show answer

   Answer: D

   Next question

5. Question 245 · 335 in bank

   A penetration tester is conducting an on-site review and wants to capture SSO credentials for staff in a specific department. Which of the following attack types would be most effective for this task?

   • ACaptive portal
   • BSignal jamming
   • CWPS PIN attack
   • DChannel scanning

   Show answer

   Answer: A

   Next question

6. Question 246 · 335 in bank

   A penetration tester wants to gather the names of potential phishing targets who have access to sensitive data. Which of the following would best meet this goal?

   • AWHOIS
   • BCensys.io
   • CSpiderFoot
   • DtheHarvester

   Show answer

   Answer: D

   Next question

7. Question 247 · 335 in bank

   A penetration tester exports the following CSV data from a scanner. The tester wants to parse the data using Bash and input it into another tool.

   

   Which of the following will provide the intended output?

   • Acat data.csv | grep -v "IP" | cut -d"," -f 3,4 | sed -e 's/,//'
   • Bcat data.csv | find . -iname Username,Password
   • Ccat data.csv | grep 'username|Password’
   • Dcat data.csv | grep -i "admin" | grep -v "WINS212\|HRDB\|WAS01\|10.1ll.41.74\|10.13.9.212\|192.168.23.13"

   Show answer

   Answer: A

   Next question

8. Question 248 · 335 in bank

   Which of the following is the most likely LOLBin to be used to perform an exfiltration on a Microsoft Windows environment?

   • Aprocdump.exe
   • Bmsbuild.exe
   • Cbitsadmin.exe
   • Dcscript.exe

   Show answer

   Answer: C

   Next question

9. Question 249 · 335 in bank

   A penetration tester tries to perform an active reconnaissance on a client's IP with Nmap and receives the following results:

   

   Which of the following is the best port for the penetration tester to investigate further without valid credentials?

   • A22
   • B80
   • C123
   • D6000

   Show answer

   Answer: B

   Next question

10. Question 250 · 335 in bank

    During an internal engagement, a penetration tester compromises a Linux server. The tester wants to maintain persistence without creating or modifying files on the disk or startup scripts, since these are monitored by integrity tools. Which of the following techniques best meets these requirements?

    • AInstalling a systemd service that connects back to the C2 server
    • BInjecting a reverse shell payload into an existing running process
    • CCreating a new cron job that launches a shell on reboot
    • DAdding a new user account with sudo privileges for future access

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PT0-003 practice, question 241. 335 questions available.