PT0-003 practice questions 291–300

1. Question 291 · 335 in bank

   During a penetration test, the tester uses a vulnerability scanner to collect information about any possible vulnerabilities that could be used to compromise the network. The tester receives the results and then executes the following command: snmpwalk -v 2c -c public 192.168.1.23 Which of the following is the tester trying to do based on the command they used?

   • ABypass defensive systems to collect more information.
   • BUse an automation tool to perform the attacks.
   • CScript exploits to gain access to the systems and host.
   • DValidate the results and remove false positives.

   Show answer

   Answer: D

   Next question

2. Question 292 · 335 in bank

   Which of the following implements the "five whys" methodology during the execution phase of a penetration testing engagement?

   • ASTRIDE
   • BOCTAVE
   • CRoot cause analysis
   • DArticulation of risk

   Show answer

   Answer: C

   Next question

3. Question 293 · 335 in bank

   A penetration tester is struggling to gain access to a target system. The tester uses the Social-Engineer Toolkit to set up a deceptive email campaign that only targets the company's senior executives. Which of the following types of social engineering attacks is the tester leveraging?

   • ASpear phishing
   • BVishing
   • CWhaling
   • DWatering hole

   Show answer

   Answer: C

   Next question

4. Question 294 · 335 in bank

   Given the following output:

   

   Which of the following did the penetration tester most likely execute?

   • AExploits on discovered hosts and services
   • BA series of Nmap scans for host discovery
   • CAn automated script to confirm true positives
   • DA ping sweep of the 10.0.10.0/24 network segment

   Show answer

   Answer: C

   Next question

5. Question 295 · 335 in bank

   A penetration tester uses Burp Suite to send the following request:

   

   Which of the following options best describes what the tester is executing?

   • ASQL injection
   • BSession hijack
   • CBrute-force attack on usernames or/and password
   • DCross-site scripting

   Show answer

   Answer: A

   Next question

6. Question 296 · 335 in bank

   Which of the following is most likely a function of the legal department?

   • AShared responsibility model
   • BThird-party responsibilities
   • CAuthorization letters
   • DRules of engagement

   Show answer

   Answer: C

   Next question

7. Question 297 · 335 in bank

   During an internal penetration test, the tester uses the following command: C:\ Invoke-mimikatz.ps1 "kerberos::golden /domain:test.local /sid:S-1-5-21-3234... /target: dc01.test.local /service:CIFS /RC4:237749d82.... /user:support.test.local /ptt" Which of the following best describes the tester's goal when executing this command?

   • ABypassing normal authentication
   • BEnumerating shares
   • CObtaining current user credentials
   • DUsing password spraying

   Show answer

   Answer: A

   Next question

8. Question 298 · 335 in bank

   Select 2

   Which of the following are the most important considerations when using generative AI to assist in writing a penetration testing report? (Choose two.)

   • ASpecify which large language model and version is being used.
   • BVerify the training data that the model is using is relevant
   • CEnsure a human reviews the accuracy of summaries.
   • DProtect client data from being ingested into a model.
   • EReview the model's output for potential bias.
   • FCompare the model's output to another large language model's output.

   Show answer

   Answer: CD

   Next question

9. Question 299 · 335 in bank

   A penetration tester establishes a remote session to a host and receives the following prompt: rpcclient $> Which of the following is the tester most likely be able to do?

   • AQuery local users on the system.
   • BObtain SAM database password hashes.
   • CEnumerate session tokens.
   • DChange the Resultant Set of Group Policy applied in AD.

   Show answer

   Answer: A

   Next question

10. Question 300 · 335 in bank

    A penetration tester wants to laterally move and escalate privileges. The tester uses BloodHound to obtain the following information: regular.user → AdminTo → WS-MAINT-02 Domain Admin has active session on WS-MAINT-02 Before executing any attack, the tester observes the following: • There are no tickets in memory. • An existing Group Policy blocks the token manipulation tool. Which of the following attacks is the best way to achieve the tester's goal?

    • APass-the-hash
    • BPass-the-token
    • CKerberoasting
    • DPass-the-ticket

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PT0-003 practice, question 291. 335 questions available.