PT0-002 Exam Questions

The results of an Nmap scan are as follows: Which of the following would be the BEST conclusion about this device?

Which of the following BEST describes why a client would hold a lessons-learned meeting with the penetration-testing team?

A penetration tester who is performing a physical assessment of a company's security practices notices the company does not have any shredders inside the office building. Which of...

A company is concerned that its cloud service provider is not adequately protecting the VMs housing its software development. The VMs are housed in a datacenter with other companie...

A client wants a security assessment company to perform a penetration test against its hot site. The purpose of the test is to determine the effectiveness of the defenses that prot...

Performing a penetration test against an environment with SCADA devices brings an additional safety risk because the:

Which of the following documents describes specific activities, deliverables, and schedules for a penetration tester?

A company hired a penetration-testing team to review the cyber-physical systems in a manufacturing plant. The team immediately discovered the supervisory systems and PLCs are both...

A new security firm is onboarding its first client. The client only allowed testing over the weekend and needed the results Monday morning. However, the assessment team was not abl...

Which of the following protocols or technologies would provide in-transit confidentiality protection for emailing the final security assessment report?

A penetration tester recently completed a review of the security of a core network device within a corporate environment. The key findings are as follows: - The following request w...

A penetration tester ran a ping -A command during an unknown environment test, and it returned a 128 TTL packet. Which of the following OSs would MOST likely return a packet of thi...

A penetration tester who is doing a company-requested assessment would like to send traffic to another system using double tagging. Which of the following techniques would BEST acc...

A penetration tester is exploring a client's website. The tester performs a curl command and obtains the following: Which of the following tools would be BEST for the penetration t...

A penetration tester wrote the following script to be used in one engagement: Which of the following actions will this script perform?

The results of an Nmap scan are as follows: Which of the following device types will MOST likely have a similar response? (Choose two.)

A penetration tester conducted an assessment on a web server. The logs from this session show the following: Which of the following attacks is being attempted?

An assessment has been completed, and all reports and evidence have been turned over to the client. Which of the following should be done NEXT to ensure the confidentiality of the...

During a penetration-testing engagement, a consultant performs reconnaissance of a client to identify potential targets for a phishing campaign. Which of the following would allow...

A penetration tester was able to gain access to a system using an exploit. The following is a snippet of the code that was utilized: Which of the following commands should the pene...

Which of the following describe the GREATEST concerns about using third-party open-source libraries in application code? (Choose two.)

A penetration tester is preparing to perform activities for a client that requires minimal disruption to company operations. Which of the following are considered passive reconnais...

A consultant is reviewing the following output after reports of intermittent connectivity issues: Which of the following is MOST likely to be reported by the consultant?

Which of the following BEST describe the OWASP Top 10? (Choose two.)

A penetration tester conducted a discovery scan that generated the following: Which of the following commands generated the results above and will transform them into a list of act...

A penetration tester has been contracted to review wireless security. The tester has deployed a malicious wireless AP that mimics the configuration of the target enterprise WiFi. T...

A security engineer identified a new server on the network and wants to scan the host to determine if it is running an approved version of Linux and a patched version of Apache. Wh...

Which of the following expressions in Python increase a variable val by one (Choose two.)

A company conducted a simulated phishing attack by sending its employees emails that included a link to a site that mimicked the corporate SSO portal. Eighty percent of the employe...

A security professional wants to test an IoT device by sending an invalid packet to a proprietary service listening on TCP port 3011. Which of the following would allow the securit...

A penetration tester is reviewing the following SOW prior to engaging with a client: "Network diagrams, logical and physical asset inventory, and employees' names are to be treated...

A company recruited a penetration tester to configure wireless IDS over the network. Which of the following tools would BEST test the effectiveness of the wireless IDS solutions?

A penetration tester gains access to a system and establishes persistence, and then runs the following commands: Which of the following actions is the tester MOST likely performing...

Which of the following web-application security risks are part of the OWASP Top 10 v2017? (Choose two.)

A red team gained access to the internal network of a client during an engagement and used the Responder tool to capture important data. Which of the following was captured by the...

Running a vulnerability scanner on a hybrid network segment that includes general IT servers and industrial control systems:

An Nmap network scan has found five open ports with identified services. Which of the following tools should a penetration tester use NEXT to determine if any vulnerabilities with...

A penetration tester would like to obtain FTP credentials by deploying a workstation as an on- path attack between the target and the server that has the FTP protocol. Which of the...

Penetration-testing activities have concluded, and the initial findings have been reviewed with the client. Which of the following best describes the NEXT step in the engagement?

A penetration tester discovered a vulnerability that provides the ability to upload to a path via directory traversal. Some of the files that were discovered through this vulnerabi...

A penetration tester has established an on-path attack position and must now specially craft a DNS query response to be sent back to a target host. Which of the following utilities...

A penetration tester ran the following command on a staging server: python -m SimpleHTTPServer 9891 Which of the following commands could be used to download a file named exploit t...

When developing a shell script intended for interpretation in Bash, the interpreter /bin/bash should be explicitly specified. Which of the following character combinations should b...

A penetration-testing team is conducting a physical penetration test to gain entry to a building. Which of the following is the reason why the penetration testers should carry copi...

Given the following output: User-agent:* Disallow: /author/ Disallow: /xmlrpc.php Disallow: /wp-admin Disallow: /page/ During which of the following activities was this output MOST...

Appending string values onto another string is called:

A penetration tester is testing input validation on a search form that was discovered on a website. Which of the following characters is the BEST option to test the website for vul...

A penetration tester was conducting a penetration test and discovered the network traffic was no longer reaching the client's IP address. The tester later discovered the SOC had us...

A penetration tester wants to perform reconnaissance without being detected. Which of the following activities have a MINIMAL chance of detection? (Choose two.)

A penetration tester obtained the following results after scanning a web server using the dirb utility: Which of the following elements is MOST likely to contain useful information...