PT0-003 practice questions 311–320

1. Question 311 · 335 in bank

   During a vulnerability assessment, a penetration tester finds the following information: KRBTGT account with more than 1250 days without password change. Which of the following tools could an attacker use to exploit this vulnerability?

   • AMimikatz
   • BJohn the Ripper
   • CHashcat
   • DHydra

   Show answer

   Answer: A

   Next question

2. Question 312 · 335 in bank

   A penetration tester cannot use Nmap and must perform port discovery and banner grabbing for potential vulnerable SSH services. Given the following script:

   

   Which of the following commands will best help the tester achieve this objective?

   • Aping -с 22 "$ip_address$i"
   • Bnc "$ip_address$i" ":22"
   • Carp "$ip_address$i" ":22"
   • Dcurl scp://"$ip_address$i" ":22"

   Show answer

   Answer: B

   Next question

3. Question 313 · 335 in bank

   A penetration tester needs to enumerate domains, subdomains, and ports that belong to comptia.org. Which of the following tools will provide the most comprehensive information?

   • Anslookup/dig
   • BtheHarvester
   • CShodan
   • DAircrack-ng

   Show answer

   Answer: B

   Next question

4. Question 314 · 335 in bank

   While engaged in a penetration testing exercise, the tester needs to find all wireless access points that are near the principal building. Which of the following techniques could the penetration tester use to achieve this goal?

   • AWardriving
   • BRogue access point
   • CSide-channel attack
   • DEvil twin attack

   Show answer

   Answer: A

   Next question

5. Question 315 · 335 in bank

   A tester conducts a web application penetration test and discovers a hidden diagnostics page. The hidden diagnostics page allows a user to ping other systems and test connectivity. Which of the following payloads is best suited to test this function?

   • A; whoami ; ps aux
   • Balert(l)
   • C' SELECT @@version --
   • D../../../../../../etc/passwd

   Show answer

   Answer: A

   Next question

6. Question 316 · 335 in bank

   A tester infiltrates the internal network 10.10.0.0/22 and wants to discover hosts for further engagement activities. The tester tries to use the ping command to discover hosts, but no hosts on the network reply. The tester then uses the following command to discover hosts: nmap -Pn -sS -p161 10.10.0.0/22 Which of the following best describes what the tester is attempting to do?

   • ADiscover other hosts using a different tool.
   • BLook for hosts with open SNMP services.
   • CLook for hosts responding open or closed.
   • DLook for hosts responding filtered.
   • EConduct a full port scan on the network.

   Show answer

   Answer: C

   Next question

7. Question 317 · 335 in bank

   A penetration tester is conducting an assessment of offline systems that control a power plant. The tester is looking for vulnerabilities observable in the network stack. The rules of engagement state that the tester cannot interact with production systems. Which of the following tools or techniques should the tester use for the assessment?

   • APort mirroring
   • BStoryboarding
   • CWrite blocker
   • DSAST tool

   Show answer

   Answer: A

   Next question

8. Question 318 · 335 in bank

   Which of the following best describes the importance of including the attack steps in a penetration test report?

   • AIt easily provides the recommended mitigations.
   • BIt ensures results can be independently verified.
   • CIt proves the penetration tester's competency to the customer.
   • DIt demonstrates the difficulty of exploiting specific vulnerabilities in the kill chain.

   Show answer

   Answer: B

   Next question

9. Question 319 · 335 in bank

   After exploiting a vulnerability in an insecure service to gain access to a Linux system, a penetration tester executes the following commands: sudo -l route netstat -a last who Which of the following best describes the tester's purpose for running these commands?

   • ATo obtain information about other systems in the network
   • BTo enumerate users and services in order to identify additional targets
   • CTo prepare for establishing persistence on the system
   • DTo gather data to prepare for lateral movement

   Show answer

   Answer: D

   Next question

10. Question 320 · 335 in bank

    A penetration tester achieves shell access. The tester tries to use the following command, but it fails: netsh advfirewall set domainprofile state off Which of the following should the tester do to help correct this issue?

    • AFind other attack paths.
    • BPerform privilege escalation.
    • CValidate the target system's fingerprint.
    • DGather more data about the network.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PT0-003 practice, question 311. 335 questions available.