PT0-003 practice questions 331–335

1. Question 331 · 335 in bank

   A penetration tester must obtain network credentials. The penetration tester has not previously accessed the systems. The target subnet within the network is mainly used by employee workstations for daily tasks. Which of the following actions will most likely achieve this goal?

   • AExecute Responder to collect account hashes
   • BRun secretsdump to retrieve stored credentials.
   • CUse msfvenom to create exploit executables.
   • DConduct Nmap scans to gain knowledge about the hosts.

   Show answer

   Answer: A

   Next question

2. Question 332 · 335 in bank

   A penetration tester obtains a copy of the file that contains password hashes of a Linux system. Which of the following toots should the penetration tester use first?

   • AHydra
   • Bunshadow
   • Chashcat
   • DJohn the Ripper

   Show answer

   Answer: B

   Next question

3. Question 333 · 335 in bank

   Which of the following is the best mechanism to covertly and quickly exfiltrate a large amount of data?

   • ANetwork Time Protocol
   • BInternet Control Message Protocol
   • CSimple Mail Transport Protocol
   • DDomain Name System Protocol

   Show answer

   Answer: D

   Next question

4. Question 334 · 335 in bank

   A penetration tester completes an assessment for a healthcare company. Several findings indicate the potential exposure of sensitive patient data. Which of the following steps must the penetration tester complete before dosing the engagement?

   • ACopy the patient data to an external hard disk drive.
   • BEnsure local copies of patient data are deleted.
   • CEncrypt any sensitive patient data that may be needed later.
   • DCapture the cryptographic hash of the patient data files.

   Show answer

   Answer: B

   Next question

5. Question 335 · 335 in bank

   A tester infiltrates an internal network and wants to move laterally. The tester conducts host and service discovery and finds the following: • A number of internal web servers require user login (one HTTPS and five HTTP). • Two SQL servers are running PostgreSQL. • Two fileshare servers are running SMB 3. • There are multiple Windows and *NIX user endpoints. The tester has not found any usable credentials on the compromised machine. During preengagement activities, the tester teams that the client's password policy has the following requirements: • Passwords must have a minimum of 16 characters • Passwords must have both alphanumeric and special characters. Which of the following will best achieve the tester's objective?

   • AAttempting a DCSync attack
   • BPerforming mask attacks against service logins
   • CConducting an on-path attack against the fileshares
   • DCapturing web server traffic

   Show answer

   Answer: C

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PT0-003 practice, question 331. 335 questions available.