PT0-003 practice questions 31–40

1. Question 31 · 335 in bank

   A penetration tester attempts to run an automated web-application scanner against a target URL. The tester validates that the web page is accessible from a different device. The tester analyzes the following HTTP request header logging output:

   

   Which of the following actions should the tester take to get the scans to work properly?

   • AModify the scanner to slow down the scan.
   • BChange the source IP with a VPN.
   • CModify the scanner to only use HTTP GET requests.
   • DModify the scanner user agent.

   Show answer

   Answer: D

   Next question

2. Question 32 · 335 in bank

   During an assessment, a penetration tester runs the following command: setspn.exe -Q */* Which of the following attacks is the penetration tester preparing for?

   • ALDAP injection
   • BPass-the-hash
   • CKerberoasting
   • DDictionary

   Show answer

   Answer: C

   Next question

3. Question 33 · 335 in bank

   While conducting an assessment, a penetration tester identifies the details for several unreleased products announced at a company-wide meeting. Which of the following attacks did the tester most likely use to discover this information?

   • AEavesdropping
   • BBluesnarfing
   • CCredential harvesting
   • DSQL injection attack

   Show answer

   Answer: A

   Next question

4. Question 34 · 335 in bank

   A penetration tester wants to attack a server, exhausting its resources and making it unavailable to legitimate users. Which of the following attacks would be best to achieve this result?

   • AIP spoofing
   • BTCP hijacking
   • CPort redirection
   • DSYN flooding

   Show answer

   Answer: D

   Next question

5. Question 35 · 335 in bank

   During an internal penetration test, a tester compromises a Windows OS-based endpoint and bypasses the defensive mechanism on that system. The tester also discovers the endpoint is part of an Active Directory local domain. The tester’s main goal is to leverage credentials to authenticate into other systems within the Active Directory environment. Which of the following steps should the tester take to complete the goal?

   • AUse Mimikatz to collect information about the accounts and try to authenticate in other systems.
   • BUse hasheat to crack a password for the local user on the compromised endpoint.
   • CUse Evil-WinRM to access other systems in the network within the endpoint credentials.
   • DUse Metasploit to create and execute a payload and try to upload the payload into other systems.

   Show answer

   Answer: A

   Next question

6. Question 36 · 335 in bank

   A penetration tester is conducting a wireless security assessment for a client with 2.4GHz and 5GHz access points. The tester places a wireless USB dongle in the laptop to start capturing WPA2 handshakes. Which of the following steps should the tester take next?

   • AEnable monitoring mode using Aircrack-ng.
   • BUse Kismet to automatically place the wireless dongle in monitor mode and collect handshakes.
   • CRun KARMA to break the password.
   • DResearch WIGLE.net for potential nearby client access points.

   Show answer

   Answer: A

   Next question

7. Question 37 · 335 in bank

   A tester performs a vulnerability scan and identifies several outdated libraries used within the customer SaaS product offering. Which of the following types of scans did the tester use to identify the libraries?

   • AIAST
   • BSBOM
   • CDAST
   • DSAST

   Show answer

   Answer: B

   Next question

8. Question 38 · 335 in bank

   A penetration tester reviews a SAST vulnerability scan report. The following vulnerability has been reported as high severity:

   

   The tester inspects the source file and finds the variable response is defined as a constant and is not referred to or used in other sections of the code. Which of the following describes how the tester should classify this reported vulnerability?

   • AFalse negative
   • BFalse positive
   • CTrue positive
   • DLow severity

   Show answer

   Answer: B

   Next question

9. Question 39 · 335 in bank

   A penetration tester would like to leverage a CSRF vulnerability to gather sensitive details from an application's end users. Which of the following tools should the tester use for this task?

   • ABrowser Exploitation Framework
   • BMaltego
   • CMetasploit
   • DtheHarvester

   Show answer

   Answer: A

   Next question

10. Question 40 · 335 in bank

    A penetration tester gains access to a Linux computer system. The tester then attempts to enumerate user accounts, including the directories and user default shell. Which of the following commands should the tester use to enumerate user accounts?

    • Acat /etc/shadow
    • Bls /var/usr
    • Cls /home
    • Dcat /etc/passwd

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PT0-003 practice, question 31. 335 questions available.